cve.akaoma.com Critical Vulnerability CVE-2026-4767 in TR7 Cyber Defense WAF-ASP
Article Content
- •CVE-2026-4767 allows unauthenticated access to critical functions in WAF-ASP.
- •A CVSS score of 9.8 indicates a critical risk requiring immediate action.
- •Users must upgrade to WAF-ASP version 1.4.0.117 or later to mitigate the vulnerability.
CVE-2026-4767 is a critical vulnerability affecting TR7 Cyber Defense Inc.'s WAF-ASP versions from v1.0.324.900 to before v1.4.0.117. The flaw allows unauthenticated attackers to bypass authentication controls, enabling unauthorized access to critical functions and potential manipulation of security policies. The CVSS base score assigned is 9.8, indicating a critical risk. Currently, there is no evidence of public proof-of-concept or active exploitation. A patch is available, and users are urged to upgrade to version 1.4.0.117 or later. Network access to administrative interfaces should be restricted, and access logs should be monitored for suspicious activity. Immediate intervention is recommended to mitigate risks associated with this vulnerability.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track CVE-2026-4767 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…