Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
2.1
CVE-2026-69662: Toptech TMS7 and TopHAT allow code injection
CVE-2026-69662 · published 19 days ago
Summary
The Toptech TMS7 and TopHAT applications can run code that an attacker inserts into the system. This could let a malicious user execute unwanted commands or steal data. Update the software or apply the vendor's patches to stop this behavior.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| toptech systems | tms7 | 7.6.3 |
| toptech systems | tophat | 7.6.3 |
Original advisory text
Toptech TMS7 and TopHAT Eval Injection
The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
2.1
Low
Type
CWE-95Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')
Timeline
Published29 Sep 2026
Updated19 Oct 2026
First seen29 Sep 2026
Track software like this
Free during beta