← Back to Feed
Toptech TMS7 and TopHAT
CVE-2026-71379CVE-2026-70356CVE-2026-72510CVE-2026-63713CVE-2026-68954CVE-2026-68068CVE-2026-72507CVE-2026-71302CVE-2026-69662CVE-2026-71189
September 29, 2026 · CISA (US-CERT) · Severity: CRITICAL
This CISA advisory details multiple vulnerabilities in Toptech TMS7 and TopHAT industrial control software, including flaws that allow unauthenticated database access, SQL injection, and arbitrary code execution. The affected products are used in energy, chemical, and transportation sectors globally. The vendor has released version 7.8 to remediate these issues. 📌 **Analyst Note:** Organizations in critical infrastructure should immediately update to Toptech TMS7 and TopHAT version 7.8, as the unauthenticated database export vulnerability (CVE-2026-71379) poses a severe risk of data exposure and system compromise.
Key Takeaways
- Toptech TMS7 and TopHAT version 7.6.3 contain ten vulnerabilities including unauthenticated database export, SQL injection, session fixation, and eval injection, with a maximum CVSS score of 10.
- Successful exploitation could allow an attacker to access critical data or execute arbitrary code, affecting critical infrastructure sectors such as Energy, Chemical, and Transportation Systems worldwide.
- Toptech Systems has addressed these issues in release 7.8, and customers are urged to obtain the latest version from the vendor's security blog to mitigate risks.
- Successful exploitation could allow an attacker to access critical data or execute arbitrary code, affecting critical infrastructure sectors such as Energy, Chemical, and Transportation Systems worldwide.
- Toptech Systems has addressed these issues in release 7.8, and customers are urged to obtain the latest version from the vendor's security blog to mitigate risks.