CVE-2026-4770

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber ​​Defense Inc. Web Application Firewall allows DOM-Based XSS. This issue affects Web Application Firewall: from v1.0.42.239 before v1.4.0.117.

Score

CVSS 3.1 4.6 Medium

Status

Deferred - iletisim@usom.gov.tr

Published

2026-07-02

Last modified

2026-10-25

Weaknesses

CWE-79

Affected products

• Waf-asp (Tr7 Cyber Defense Inc.)

References

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0487