Tr7 Cyber Defense Inc Waf-Asp vulnerabilities
3 known vulnerabilities affecting tr7_cyber_defense_inc/waf-asp.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2026-4767P2CRITICALCVSS 9.8≥ v1.0.324.900, < v1.4.0.1172026-07-02
CVE-2026-4767 [CRITICAL] CWE-306 CVE-2026-4767: Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allow
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Authentication Abuse.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
nvd
CVE-2026-4772P4MEDIUMCVSS 5.4≥ v1.0.324.900, < v1.4.0.1172026-07-02
CVE-2026-4772 [MEDIUM] CWE-79 CVE-2026-4772: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
nvd
CVE-2026-4770P4MEDIUMCVSS 4.6≥ v1.0.42.239, < v1.4.0.1172026-07-02
CVE-2026-4770 [MEDIUM] CWE-79 CVE-2026-4770: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability i
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS.
This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.
nvd