Missing Authentication Vulnerability in TR7 Cyber Defense Inc. WAF-ASP
CVE-2026-4767

9.8CRITICAL

Key Information:

Vendor

Tr7 Cyber ​​defense Inc.

Status
Waf-asp
Vendor
CVE Published:
2 July 2026

What is CVE-2026-4767?

The WAF-ASP product from TR7 Cyber Defense Inc. contains a missing authentication vulnerability that could allow unauthorized individuals to abuse critical functions. This vulnerability is present in versions ranging from v1.0.324.900 to versions just below v1.4.0.117. Exploiting this issue could lead to unauthorized access, presenting a significant risk to web application security.

Affected Version(s)

WAF-ASP v1.0.324.900

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/...
government-resource

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Serhat YAPICI
.