Unrated severityNVD Advisory· Published Jul 2, 2026· Updated Jul 2, 2026
Stored XSS in TR7's WAF-ASP
CVE-2026-4772
Description
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS.
This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.
Patches
Vulnerability mechanics
References
1- siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487mitregovernment-resource
News mentions
0No linked articles in our index yet.