CVE-2026-4772 — Stored XSS in TR7's WAF-ASP

CVE-2026-4772

Stored XSS in TR7's WAF-ASP PUBLISHED

Description (CNA)

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Affected (CNA)

Vendor / product	Versions
TR7 Cyber Defense Inc. / WAF-ASP	affected v1.0.324.900 before v1.4.0.117

CWE

CWE-79

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.