CVE-2026-4767

Improper Access Control in TR7's WAF-ASP PUBLISHED

Description (CNA)

Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Affected (CNA)

Vendor / product	Versions
TR7 Cyber Defense Inc. / WAF-ASP	affected v1.0.324.900 before v1.4.0.117

CWE

CWE-306

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.