Ghostwire

CVE-2026-4772: Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber...

MEDIUM CVSS 0.0

Published: July 2, 2026 | Last Modified: July 2, 2026

Description

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in TR7 Cyber Defense Inc. WAF-ASP allows Stored XSS. This issue affects WAF-ASP: from v1.0.324.900 before v1.4.0.117.

Ghostwire Analysis — What This Means Practically

15 articles from independent security sources have covered this vulnerability, indicating significant industry attention.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Security Coverage (15 articles)

References

www.tenable.com/cve/CVE-2026-4772
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-4772