🔐 CVE Alert

CVE-2026-69662

LOW 3.7

Toptech TMS7 and TopHAT Eval Injection

CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

CWE CWE-95
Vendor toptech systems
Product tms7
Published Sep 29, 2026
Stay Ahead of the Next One

Get instant alerts for toptech systems tms7

Be the first to know when new low vulnerabilities affecting toptech systems tms7 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Affected Versions

Toptech Systems / TMS7
7.6.3
Toptech Systems / TopHAT
7.6.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗
toptech.com: https://www.toptech.com/blog/tms7-version-7-8-strengthens-security cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02 github.com: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-272-02.json

Credits

Sachin Shetty and Roy Duisters of Shell CyberDefence reported this vulnerability to Toptech and CISA.