CVE-2026-4770 — DOM-Based XSS in TR7's WAF-ASP

CVE-2026-4770

DOM-Based XSS in TR7's WAF-ASP PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.

Affected (CNA)

Vendor / product	Versions
TR7 Cyber Defense Inc. / WAF-ASP	affected v1.0.42.239 before v1.4.0.117

CWE

CWE-79

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.