[ Vendor · 10 CVEs ]
Toptech Systems
CVEs affecting Toptech Systems published in the last 30 days, plus any Toptech Systems CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-72507 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL… | |
| CVE-2026-72510 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "supplier_no" parameter used in the business allocation search feature is vulnerable to time-based blind SQL injection. | |
| CVE-2026-71379 | 29 Sep 2026 | CVSS 10.0 | Toptech Systems TMS7The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request. | |
| CVE-2026-71189 | 29 Sep 2026 | CVSS 3.5 | Toptech Systems TMS7An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute… | |
| CVE-2026-71302 | 29 Sep 2026 | CVSS 7.1 | Toptech Systems TMS7The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to… | |
| CVE-2026-70356 | 29 Sep 2026 | CVSS 9.1 | Toptech Systems TMS7The TMS file upload endpoint fails to enforce server-side file type restrictions, allowing an attacker to upload and execute arbitrary PHP files on… | |
| CVE-2026-69662 | 29 Sep 2026 | CVSS 3.7 | Toptech Systems TMS7The application uses unsafe functions that allow execution of inline scripts and string evaluation functions. | |
| CVE-2026-68954 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "pattern" parameter used in search function in the home page of the TMS application is vulnerable to time-based blind SQL injection vulnerability. | |
| CVE-2026-68068 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "screenID" parameter in the electronic transaction queue viewer feature within the manual transactions section is susceptible to a time-based… | |
| CVE-2026-63713 | 29 Sep 2026 | CVSS 9.0 | Toptech Systems TMS7The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability. |