Skip to content
OpenAdvisories
Critical ICSA-26-272-02 10 CVEs

Toptech TMS7 and TopHAT

Published Sep 29, 2026 · Updated Sep 29, 2026

Vendor: Toptech Systems Product: TMS7 Product: TopHAT

Summary

Successful exploitation of these vulnerabilities could allow an attacker to access critical data or execute arbitrary code.

Vulnerabilities 10

  • Critical 10.0
    CVE-2026-71379

    Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

    The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.

    Toptech Systems TopHAT TMS7
  • Critical 9.1
    CVE-2026-70356

    Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type

    The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.

    Toptech Systems TopHAT TMS7
  • Critical 9.0
    CVE-2026-63713

    Toptech TMS7 and TopHAT SQL Injection

    The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.

    Toptech Systems TopHAT TMS7
  • Critical 9.0
    CVE-2026-68068

    Toptech TMS7 and TopHAT SQL Injection

    The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.

    Toptech Systems TMS7 TopHAT
  • Critical 9.0
    CVE-2026-68954

    Toptech TMS7 and TopHAT SQL Injection

    The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.

    Toptech Systems TMS7 TopHAT
  • Critical 9.0
    CVE-2026-72507

    Toptech TMS7 and TopHAT SQL Injection

    The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.

    Toptech Systems TopHAT TMS7
  • Critical 9.0
    CVE-2026-72510

    Toptech TMS7 and TopHAT SQL Injection

    The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.

    Toptech Systems TMS7 TopHAT
  • High 7.1
    CVE-2026-71302

    Toptech TMS7 and TopHAT Session Fixation

    The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.

    Toptech Systems TMS7 TopHAT
  • Low 3.7
    CVE-2026-69662

    Toptech TMS7 and TopHAT Eval Injection

    The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

    Toptech Systems TopHAT TMS7
  • Low 3.5
    CVE-2026-71189

    Toptech TMS7 and TopHAT Cross-site Scripting

    An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.

    Toptech Systems TopHAT TMS7

Revision history

  1. #1

    Initial Publication

References