CVE-2026-16740
Critical
Description
Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. TR7 ASP on virtual appliance and TR7 Cyber Defense Inc. TR7 ASP on physical appliance allows OS Command Injection. This issue affects TR7 ASP: from 1.0.40.236 before 1.0.1554.2331; TR7 ASP: from 1.6.42.239 before 1.6.1554.2331.
SeverityCritical
CVSS9.8
Exploit probability—
ProductTR7 ASP
PublishedOct 14, 2026
First seenOct 14, 2026
Weakness typeCWE-306Missing authentication for critical function
How to fix
Update
- TR7 Cyber Defense Inc. TR7 ASP1.0.1554.2331, 1.6.1554.2331 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TR7 Cyber Defense Inc. TR7 ASP | 1.0.40.236 ≤ v < 1.0.1554.2331, 1.6.42.239 ≤ v < 1.6.1554.2331 | 1.0.1554.2331, 1.6.1554.2331 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.