Open Redirect Vulnerability in TR7 Cyber Defense Web Application Firewall
CVE-2025-2418

4.3MEDIUM

Key Information:

Vendor

Tr7 Cyber ​​defense Inc.

Status
Web Application Firewall
Vendor
CVE Published:
16 February 2026

What is CVE-2025-2418?

The TR7 Cyber Defense Web Application Firewall is affected by a vulnerability that allows URL redirection to untrusted sites, creating opportunities for phishing attacks. This issue can lead to users being misled into visiting malicious sites, putting sensitive information at risk. Despite early notifications, the vendor has not responded regarding this critical security concern.

Affected Version(s)

Web Application Firewall 4.30

References

https://www.usom.gov.tr/bildirim/tr-26-0066
government-resourcebroken-link
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Regaip KURT
.