CVE-2026-69662: Toptech TMS7 and TopHAT Eval Injection

Published Sep 29, 2026

Updated

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

Affected Software

2 affected components

Toptech TMS7

Toptech TopHAT

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Toptech TMS7 to a version that resolves this vulnerability.
Fixed in 7.8

Event History

Sep 29, 2026

CVE Published

via MITRE·09:44 PM

Data Sourced

via MITRE·09:44 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·10:17 PM

DescriptionSeverityWeakness

Oct 4, 58715

Event

via NVD·07:41 PM

Frequently Asked Questions

What access would an attacker need to exploit this issue?

The CVSS vector indicates adjacent-network access, low-level privileges, and no user interaction are required. Exploitation is rated high complexity.

What is the expected impact if exploitation succeeds?

The reported impact is limited confidentiality and integrity impact, with no availability impact. The listed severity is low, with a CVSS score of 3.7.