CVE-2026-4767: TR7 Cyber ​​defense Inc Waf-Asp

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Affected products

• TR7 Cyber ​​defense Inc Waf-Asp: from v1.0.324.900, before v1.4.0.117 (fixed in v1.4.0.117)

Published 2026-07-02. Last modified 2026-07-02.