CVE-2026-16741

An OS Command Injection vulnerability (improper neutralization of special elements used in an OS command) exists in TR7 Cyber Defense Inc. TR7 ASP on both virtual and physical appliances. The vulnerability allows injection and execution of arbitrary operating system commands.

An attacker can execute arbitrary commands on the appliance's operating system, potentially leading to full compromise of the device and network infrastructure. This may result in loss of confidentiality, integrity, and availability of protected assets.

Update TR7 ASP to version 1.0.1554.2331 or 1.6.1554.2331 (or later) to remediate the vulnerability. It is also recommended to restrict administrative access to the appliance and monitor for unusual system commands.