Critical Vulnerability CVE-2026-4767 in TR7 Cyber Defense WAF-ASP

CVE-2026-4767 is a critical authentication bypass in TR7 Cyber Defense Inc.'s WAF-ASP (versions v1.0.324.900 up to before v1.4.0.117) with a CVSS base score of 9.8; the flaw permits unauthenticated attackers to access and manipulate critical functions. A patch is available (upgrade to v1.4.0.117 or later), administrators are advised to restrict network access to administrative interfaces and monitor logs for suspicious activity, and immediate intervention is recommended despite no current evidence of public proof-of-concept or active exploitation.