[ CVE-2026-71302 · Published 29 Sep 2026 ]
Vulnerability in Toptech Systems TMS7
CVSS 7.1
EPSS <1%No fix listed yet
[ Description ]Official description
The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.
[ Fixes ]Fixes and patches
No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.