Search
Find a vulnerability
Search criteria
22 vulnerabilities by Toptech Systems
CVE-2026-72510 (GCVE-0-2026-72510)
Vulnerability from nvd – Published: 2026-09-29 21:28 – Updated: 2026-09-29 21:28
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"supplier_no\" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection."
}
],
"value": "The \"supplier_no\" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:28:26.762Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-72510",
"datePublished": "2026-09-29T21:28:26.762Z",
"dateReserved": "2026-08-10T17:31:09.979Z",
"dateUpdated": "2026-09-29T21:28:26.762Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-72507 (GCVE-0-2026-72507)
Vulnerability from nvd – Published: 2026-09-29 21:36 – Updated: 2026-09-29 21:36
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"reportType\" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"value": "The \"reportType\" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:36:53.928Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-72507",
"datePublished": "2026-09-29T21:36:53.928Z",
"dateReserved": "2026-08-10T17:31:09.965Z",
"dateUpdated": "2026-09-29T21:36:53.928Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-71379 (GCVE-0-2026-71379)
Vulnerability from nvd – Published: 2026-09-29 21:23 – Updated: 2026-09-29 21:23
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties
Summary
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.
Severity
10 (Critical)
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request."
}
],
"value": "The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "CWE-552",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:23:25.412Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-71379",
"datePublished": "2026-09-29T21:23:25.412Z",
"dateReserved": "2026-08-10T17:31:09.986Z",
"dateUpdated": "2026-09-29T21:23:25.412Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-71302 (GCVE-0-2026-71302)
Vulnerability from nvd – Published: 2026-09-29 21:41 – Updated: 2026-09-29 21:41
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Session Fixation
Summary
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover."
}
],
"value": "The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:41:11.253Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Session Fixation",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-71302",
"datePublished": "2026-09-29T21:41:11.253Z",
"dateReserved": "2026-08-10T17:31:09.961Z",
"dateUpdated": "2026-09-29T21:41:11.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-71189 (GCVE-0-2026-71189)
Vulnerability from nvd – Published: 2026-09-29 21:46 – Updated: 2026-09-29 21:46
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Cross-site Scripting
Summary
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user\u0027s browser in the context of that user\u0027s session with the application."
}
],
"value": "An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user\u0027s browser in the context of that user\u0027s session with the application."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:46:48.138Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Cross-site Scripting",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-71189",
"datePublished": "2026-09-29T21:46:48.138Z",
"dateReserved": "2026-08-10T17:31:09.953Z",
"dateUpdated": "2026-09-29T21:46:48.138Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70356 (GCVE-0-2026-70356)
Vulnerability from nvd – Published: 2026-09-29 21:26 – Updated: 2026-09-29 21:26
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type
Summary
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.
Severity
9.1 (Critical)
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server."
}
],
"value": "The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:26:22.603Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-70356",
"datePublished": "2026-09-29T21:26:22.603Z",
"dateReserved": "2026-08-10T17:31:09.982Z",
"dateUpdated": "2026-09-29T21:26:22.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69662 (GCVE-0-2026-69662)
Vulnerability from nvd – Published: 2026-09-29 21:44 – Updated: 2026-09-29 21:44
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Eval Injection
Summary
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The application uses unsafe functions that allow execution of inline scripts and string evaluation functions."
}
],
"value": "The application uses unsafe functions that allow execution of inline scripts and string evaluation functions."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 2.1,
"baseSeverity": "LOW",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-95",
"description": "CWE-95",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:44:07.903Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Eval Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-69662",
"datePublished": "2026-09-29T21:44:07.903Z",
"dateReserved": "2026-08-10T17:31:09.958Z",
"dateUpdated": "2026-09-29T21:44:07.903Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68954 (GCVE-0-2026-68954)
Vulnerability from nvd – Published: 2026-09-29 21:32 – Updated: 2026-09-29 21:32
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"pattern\" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability."
}
],
"value": "The \"pattern\" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:32:05.984Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-68954",
"datePublished": "2026-09-29T21:32:05.984Z",
"dateReserved": "2026-08-10T17:31:09.972Z",
"dateUpdated": "2026-09-29T21:32:05.984Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68068 (GCVE-0-2026-68068)
Vulnerability from nvd – Published: 2026-09-29 21:33 – Updated: 2026-09-29 21:33
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"screenID\" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"value": "The \"screenID\" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:33:47.332Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-68068",
"datePublished": "2026-09-29T21:33:47.332Z",
"dateReserved": "2026-08-10T17:31:09.969Z",
"dateUpdated": "2026-09-29T21:33:47.332Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-63713 (GCVE-0-2026-63713)
Vulnerability from nvd – Published: 2026-09-29 21:30 – Updated: 2026-09-29 21:30
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"search\" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"value": "The \"search\" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:30:32.531Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-63713",
"datePublished": "2026-09-29T21:30:32.531Z",
"dateReserved": "2026-08-10T17:31:09.976Z",
"dateUpdated": "2026-09-29T21:30:32.531Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-12562 (GCVE-0-2026-12562)
Vulnerability from nvd – Published: 2026-07-30 21:29 – Updated: 2026-07-31 15:39
VLAI
EPSS
VEX
Title
Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function
Summary
The RCU II+ and Multiload II+ are vulnerable to an unauthenticated
service that exposes a debug interface granting full root-level access
to the embedded system. This vulnerability stems from a
network-accessible port running a Target Communications Framework (TCF)
service that does not require any authentication, allowing an attacker
to directly interact with the Linux environment that powers the device.
Once connected, an attacker can freely view and modify the filesystem,
manipulate running processes, and control network interfaces, enabling
deep alteration of system behavior.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-31 15:39 UTC
CWE
Assigner
References
6 references
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | RCU II+ |
Affected:
0 , < 2025-11-24
(custom)
|
|
| Toptech Systems | Multiload II+ |
Affected:
0 , < 2025-11-24
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-12562",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-31T15:39:39.902412Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T15:39:49.359Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "RCU II+",
"vendor": "Toptech Systems",
"versions": [
{
"lessThan": "2025-11-24",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Multiload II+",
"vendor": "Toptech Systems",
"versions": [
{
"lessThan": "2025-11-24",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Donald Green of Southwest Research Institute reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
}
],
"value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T23:58:13.132Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip"
},
{
"url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz"
},
{
"url": "https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/"
},
{
"url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-03.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eToptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\u003c/a\u003e,\n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\"\u003e \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\u003c/a\u003e.\n \u003c/div\u003e\u003cul\u003e\u003cli\u003eThis option does not require breaking Weights and Measures seals and has the least operational impact.\u003c/li\u003e\u003c/ul\u003eInstall the latest firmware from \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\u003c/a\u003e.\n \u003cul\u003e\u003cli\u003eThis method requires stopping the bay and breaking the W\u0026amp;M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\u003c/li\u003e\u003c/ul\u003e\u003cdiv\u003e\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\u003c/a\u003e.\n\n\u003c/div\u003e"
}
],
"value": "Toptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\n\n\n\n\nRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip ,\n \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz.\n \n\n * This option does not require breaking Weights and Measures seals and has the least operational impact.\n\n\nInstall the latest firmware from \n https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/ .\n * This method requires stopping the bay and breaking the W\u0026M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\n\n\n\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf ."
}
],
"source": {
"advisory": "ICSA-26-211-03",
"discovery": "EXTERNAL"
},
"title": "Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-12562",
"datePublished": "2026-07-30T21:29:35.378Z",
"dateReserved": "2026-06-17T20:31:31.583Z",
"dateUpdated": "2026-07-31T15:39:49.359Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-71189 (GCVE-0-2026-71189)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:46 – Updated: 2026-09-29 21:46
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Cross-site Scripting
Summary
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user\u0027s browser in the context of that user\u0027s session with the application."
}
],
"value": "An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user\u0027s browser in the context of that user\u0027s session with the application."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:46:48.138Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Cross-site Scripting",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-71189",
"datePublished": "2026-09-29T21:46:48.138Z",
"dateReserved": "2026-08-10T17:31:09.953Z",
"dateUpdated": "2026-09-29T21:46:48.138Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-69662 (GCVE-0-2026-69662)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:44 – Updated: 2026-09-29 21:44
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Eval Injection
Summary
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The application uses unsafe functions that allow execution of inline scripts and string evaluation functions."
}
],
"value": "The application uses unsafe functions that allow execution of inline scripts and string evaluation functions."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 2.1,
"baseSeverity": "LOW",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-95",
"description": "CWE-95",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:44:07.903Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Eval Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-69662",
"datePublished": "2026-09-29T21:44:07.903Z",
"dateReserved": "2026-08-10T17:31:09.958Z",
"dateUpdated": "2026-09-29T21:44:07.903Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-71302 (GCVE-0-2026-71302)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:41 – Updated: 2026-09-29 21:41
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Session Fixation
Summary
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover."
}
],
"value": "The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "HIGH",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "LOW",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-384",
"description": "CWE-384",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:41:11.253Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Session Fixation",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-71302",
"datePublished": "2026-09-29T21:41:11.253Z",
"dateReserved": "2026-08-10T17:31:09.961Z",
"dateUpdated": "2026-09-29T21:41:11.253Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-72507 (GCVE-0-2026-72507)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:36 – Updated: 2026-09-29 21:36
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"reportType\" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"value": "The \"reportType\" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:36:53.928Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-72507",
"datePublished": "2026-09-29T21:36:53.928Z",
"dateReserved": "2026-08-10T17:31:09.965Z",
"dateUpdated": "2026-09-29T21:36:53.928Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68068 (GCVE-0-2026-68068)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:33 – Updated: 2026-09-29 21:33
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"screenID\" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"value": "The \"screenID\" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:33:47.332Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-68068",
"datePublished": "2026-09-29T21:33:47.332Z",
"dateReserved": "2026-08-10T17:31:09.969Z",
"dateUpdated": "2026-09-29T21:33:47.332Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-68954 (GCVE-0-2026-68954)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:32 – Updated: 2026-09-29 21:32
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"pattern\" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability."
}
],
"value": "The \"pattern\" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:32:05.984Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-68954",
"datePublished": "2026-09-29T21:32:05.984Z",
"dateReserved": "2026-08-10T17:31:09.972Z",
"dateUpdated": "2026-09-29T21:32:05.984Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-63713 (GCVE-0-2026-63713)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:30 – Updated: 2026-09-29 21:30
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"search\" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"value": "The \"search\" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:30:32.531Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-63713",
"datePublished": "2026-09-29T21:30:32.531Z",
"dateReserved": "2026-08-10T17:31:09.976Z",
"dateUpdated": "2026-09-29T21:30:32.531Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-72510 (GCVE-0-2026-72510)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:28 – Updated: 2026-09-29 21:28
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT SQL Injection
Summary
The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection.
Severity
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"supplier_no\" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection."
}
],
"value": "The \"supplier_no\" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "LOW",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:28:26.762Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT SQL Injection",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-72510",
"datePublished": "2026-09-29T21:28:26.762Z",
"dateReserved": "2026-08-10T17:31:09.979Z",
"dateUpdated": "2026-09-29T21:28:26.762Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-70356 (GCVE-0-2026-70356)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:26 – Updated: 2026-09-29 21:26
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type
Summary
The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server.
Severity
9.1 (Critical)
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server."
}
],
"value": "The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on the web server."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "HIGH",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-434",
"description": "CWE-434",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:26:22.603Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-70356",
"datePublished": "2026-09-29T21:26:22.603Z",
"dateReserved": "2026-08-10T17:31:09.982Z",
"dateUpdated": "2026-09-29T21:26:22.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-71379 (GCVE-0-2026-71379)
Vulnerability from cvelistv5 – Published: 2026-09-29 21:23 – Updated: 2026-09-29 21:23
VLAI
EPSS
VEX
Title
Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties
Summary
The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.
Severity
10 (Critical)
CWE
Assigner
References
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | TMS7 |
Affected:
7.6.3
Unaffected: 7.8 |
|
| Toptech Systems | TopHAT |
Affected:
7.6.3
Unaffected: 7.8 |
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "TMS7",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
},
{
"defaultStatus": "unaffected",
"product": "TopHAT",
"vendor": "Toptech Systems",
"versions": [
{
"status": "affected",
"version": "7.6.3"
},
{
"status": "unaffected",
"version": "7.8"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request."
}
],
"value": "The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "HIGH",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "CWE-552",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-29T21:23:25.412Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\u003cbr\u003e\u003ca href=\"https://www.toptech.com/blog/tms7-version-7-8-strengthens-security\"\u003ehttps://www.toptech.com/blog/tms7-version-7-8-strengthens-security\u003c/a\u003e"
}
],
"value": "Toptech Systems sent a security advisory to their customers on July 20, 2026. The issue has been addressed in release 7.8. Users can get the latest release and more information on this issue at the Toptech Systems security blog.\n https://www.toptech.com/blog/tms7-version-7-8-strengthens-security"
}
],
"source": {
"advisory": "ICSA-26-272-02",
"discovery": "EXTERNAL"
},
"title": "Toptech TMS7 and TopHAT Files or Directories Accessible to External Parties",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-71379",
"datePublished": "2026-09-29T21:23:25.412Z",
"dateReserved": "2026-08-10T17:31:09.986Z",
"dateUpdated": "2026-09-29T21:23:25.412Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-12562 (GCVE-0-2026-12562)
Vulnerability from cvelistv5 – Published: 2026-07-30 21:29 – Updated: 2026-07-31 15:39
VLAI
EPSS
VEX
Title
Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function
Summary
The RCU II+ and Multiload II+ are vulnerable to an unauthenticated
service that exposes a debug interface granting full root-level access
to the embedded system. This vulnerability stems from a
network-accessible port running a Target Communications Framework (TCF)
service that does not require any authentication, allowing an attacker
to directly interact with the Linux environment that powers the device.
Once connected, an attacker can freely view and modify the filesystem,
manipulate running processes, and control network interfaces, enabling
deep alteration of system behavior.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-07-31 15:39 UTC
CWE
Assigner
References
6 references
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Toptech Systems | RCU II+ |
Affected:
0 , < 2025-11-24
(custom)
|
|
| Toptech Systems | Multiload II+ |
Affected:
0 , < 2025-11-24
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-12562",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-31T15:39:39.902412Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-31T15:39:49.359Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "RCU II+",
"vendor": "Toptech Systems",
"versions": [
{
"lessThan": "2025-11-24",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Multiload II+",
"vendor": "Toptech Systems",
"versions": [
{
"lessThan": "2025-11-24",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Donald Green of Southwest Research Institute reported this vulnerability to CISA."
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
}
],
"value": "The RCU II+ and Multiload II+ are vulnerable to an unauthenticated \nservice that exposes a debug interface granting full root-level access \nto the embedded system. This vulnerability stems from a \nnetwork-accessible port running a Target Communications Framework (TCF) \nservice that does not require any authentication, allowing an attacker \nto directly interact with the Linux environment that powers the device. \nOnce connected, an attacker can freely view and modify the filesystem, \nmanipulate running processes, and control network interfaces, enabling \ndeep alteration of system behavior."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
},
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "ADJACENT",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-30T23:58:13.132Z",
"orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"shortName": "icscert"
},
"references": [
{
"url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip"
},
{
"url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz"
},
{
"url": "https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/"
},
{
"url": "https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf"
},
{
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03"
},
{
"url": "https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-211-03.json"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eToptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\u003c/div\u003e\u003cdiv\u003e\u003cbr\u003e\u003c/div\u003e\u003cdiv\u003eRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip\u003c/a\u003e,\n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\"\u003e \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz\u003c/a\u003e.\n \u003c/div\u003e\u003cul\u003e\u003cli\u003eThis option does not require breaking Weights and Measures seals and has the least operational impact.\u003c/li\u003e\u003c/ul\u003eInstall the latest firmware from \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/\u003c/a\u003e.\n \u003cul\u003e\u003cli\u003eThis method requires stopping the bay and breaking the W\u0026amp;M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\u003c/li\u003e\u003c/ul\u003e\u003cdiv\u003e\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n\u003ca href=\"https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\"\u003ehttps://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf\u003c/a\u003e.\n\n\u003c/div\u003e"
}
],
"value": "Toptech Systems provides two methods for remediating affected RCU II+ \nand Multiload II+ units: First, move the device to a closed or segmented\n network without untrusted access.\n\n\n\n\nRun one of the RCU II+/Multiload II+ Vulnerability Removal Tools (VRT)\n available at \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.zip ,\n \nhttps://s3.amazonaws.com/docs.toptech.com/nonpublic/rcuiip_mliip_vrt.gz.\n \n\n * This option does not require breaking Weights and Measures seals and has the least operational impact.\n\n\nInstall the latest firmware from \n https://s3.amazonaws.com/docs.toptech.com/index.html#downloads/Firmware/RCUII+_MLII+_SMPII+/ .\n * This method requires stopping the bay and breaking the W\u0026M seal. \nBe sure to back up the current ML configuration before performing the \nfirmware update.\n\n\n\nFor questions, contact Toptech Systems Support at security@toptech.com. \nAdditional details are available in Toptech System\u0027s firmware \nvulnerability notice: \n https://s3.amazonaws.com/docs.toptech.com/nonpublic/2025%2012%2001%20RCU%20IIPlus%20MultiLoad%20IIPlus%20Vulnerability%20Notice.pdf ."
}
],
"source": {
"advisory": "ICSA-26-211-03",
"discovery": "EXTERNAL"
},
"title": "Toptech Systems RCU II+ and Multiload II+ Missing Authentication for Critical Function",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
"assignerShortName": "icscert",
"cveId": "CVE-2026-12562",
"datePublished": "2026-07-30T21:29:35.378Z",
"dateReserved": "2026-06-17T20:31:31.583Z",
"dateUpdated": "2026-07-31T15:39:49.359Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}