CVE-2026-4767

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - iletisim@usom.gov.tr

Published

2026-07-02

Last modified

2026-10-25

Weaknesses

CWE-306

Affected products

• Waf-asp (Tr7 Cyber Defense Inc.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487