Critical · 9.8 CVE-2026-4767 EUVD-2026-41371GHSA-6qqj-v86p-pcpj

Improper Access Control in TR7's WAF-ASP

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by TR-CERT

Description

Missing authentication for critical function vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Authentication Abuse.

This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Vendor	Product	Affected	Fixed
TR7 Cyber Defense	WAF-ASP	v1.0.324.900 – < v1.4.0.117	v1.4.0.117