Skip to content
OpenAdvisories
Critical · 10.0 CVE-2026-71379 EUVD-2026-89468GHSA-qxj4-w6f9-5q44

Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties

Published Sep 29, 2026 · Updated Sep 30, 2026 · Assigned by icscert

Vendor: Toptech Systems Product: TMS7 Product: TopHAT

Description

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.

Affected products

VendorProductAffectedFixed
Toptech Systems TMS7 7.6.3 7.8
Toptech Systems TopHAT 7.6.3 7.8

Advisories 1

References