CVE-2026-16741: OS Command in TR7 Cyber Defense's TR7 ASP
Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in TR7 Cyber Defense Inc. TR7 ASP allows OS Command Injection.
This issue affects TR7 ASP: from v1.0.40.236 before v1.0.1554.2331 and from v1.6.42.239 before v1.6.1554.2331.
Affected Software
Event History
Frequently Asked Questions
Which TR7 ASP versions need to be remediated?
Affected releases are v1.0.40.236 through versions before v1.0.1554.2331, and v1.6.42.239 through versions before v1.6.1554.2331. Upgrade to v1.0.1554.2331 or later in the v1.0 branch, or v1.6.1554.2331 or later in the v1.6 branch.
Does exploitation require authentication or user interaction?
No. The supplied CVSS vector indicates network exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the potential impact if the vulnerability is exploited?
Successful exploitation can allow OS command injection. The reported CVSS impacts indicate high impact to confidentiality, integrity, and availability.