Roy Duisters

Researcher fromShell CyberDefence

#15511of 57,568

19Total CVSS

Vulnerabilities · 2

Critical

2

Toptech Systems · Tms7 · CVE-2026-63713

The "search" parameter in the view audit logs feature within the utilities section is susceptible to a time-based blind SQL injection vulnerability.

Toptech · Tms7 · CVE-2026-71379

**Name of the Vulnerable Software and Affected Versions** Toptech TMS7 versions prior to 7.8 **Description** An unauthenticated attacker can export arbitrary database tables by sending a crafted POST request to the file export endpoint. **Recommendations** Upgrade Toptech TMS7 to version 7.8.