Critical severity9.1NVD Advisory· Published Sep 29, 2026
Toptech TMS7 and TopHAT
CVE-2026-70356
Description
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.