CVE-2026-4770
published 2026-07-02CVE-2026-4770: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows…
PriorityP421medium4.6CVSS 3.1
AVNACLPRLUIRSUCLILAN
EPSS
0.23%
12.0th percentile
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS.
This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tr7_cyber_defense_inc | waf-asp | >= v1.0.42.239 < v1.4.0.117 | v1.4.0.117 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
TR7 Cyber Defense WAF-ASP prior 1.4.0.117 Web Application Firewall cross site scripting
vuldb·2026-07-02·CVSS 4.6
CVE-2026-4770 [MEDIUM] TR7 Cyber Defense WAF-ASP prior 1.4.0.117 Web Application Firewall cross site scripting
A vulnerability was found in TR7 Cyber Defense WAF-ASP. It has been declared as problematic. This impacts an unknown function of the component Web Application Firewall. Executing a manipulation can lead to cross site scripting.
The identification of this vulnerability is CVE-2026-4770. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.
GHSA
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc.
ghsa_unreviewed·2026-07-02
CVE-2026-4770 [MEDIUM] CWE-79 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc.
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS.
This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-07-02
Published