Ghostwire
Home / Vulnerabilities / CVE-2026-4767

CVE-2026-4767: Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication...

CRITICAL CVSS 0.0

Published: July 2, 2026 | Last Modified: July 2, 2026

Description

Missing authentication for critical function vulnerability in TR7 Cyber ​​Defense Inc. WAF-ASP allows Authentication Abuse. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (6 articles)

Tenable CVEs
CVE-2026-4767
 Tenable CVEs
CVE-2026-47670
 CVE Feed
CVE-2026-47676 - Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths
 CVE Feed
CVE-2026-47675 - Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection
 CVE Feed
CVE-2026-47674 - Hono: IP Restriction bypasses static deny rules for non-canonical IPv6
 CVE Feed
CVE-2026-47673 - Hono: JWT middleware accepts any Authorization scheme, not only Bearer

References