Which versions of Toptech TMS7 are affected by EUVD-2026-89468?

Toptech Systems' TMS7 and TopHat terminal-automation platforms are affected by a critical, unauthenticated database-disclosure flaw (CVE-2026-71379) that lets anyone able to reach an affected export…

How to fix or mitigate EUVD-2026-89468?

Within 24 hours, inventory every Toptech TMS7 (all versions) and TopHat deployment, determine which export endpoints are reachable from outside the trusted OT segment, and immediately block that endpoint at the perimeter firewall and any inter-segment ACLs; pull logs for POST requests to export paths to check for reconnaissance or exfiltration. Within 7 days, enforce deny-by-default segmentation so only authorized administrative hosts can reach the platform, place the systems behind an authenticated reverse proxy or jump host where architecturally feasible, add IDS/IPS detections for anomalous export-endpoint traffic, and open a case with Toptech Systems to obtain vendor mitigation guidance since no vendor-released patch has been identified. Within 30 days, complete an OT network architecture review to confirm no TMS7 or TopHat instance remains internet- or corporate-network-reachable, validate the controls through an independent penetration test, track and deploy the vendor patch as soon as it ships, and update the incident response and data-breach notification playbooks to cover this scenario.

Toptech TMS7 EUVD-2026-89468

Q: What is the CVSS score of EUVD-2026-89468?

EUVD-2026-89468 has a CVSS 4.0 base score of 10.0 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

| CVE-2026-71379 CRITICAL

Files or Directories Accessible to External Parties (CWE-552)

2026-09-29 icscert

GHSA-qxj4-w6f9-5q44

Information Disclosure Path Traversal Tophat Toptech Systems Tms7

10.0

CVSS 4.0 · Vendor: icscert

Severity by source

Vendor (icscert) PRIMARY

10.0 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

7.5 HIGH

Unauthenticated network POST with no interaction (AV:N/AC:L/PR:N/UI:N); exporting DB tables is a read primitive, so C:H but I:N/A:N, and no substantiated scope change (S:U).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (icscert).

CVSS VectorVendor: icscert

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Sep 29, 2026 - 22:08 vuln.today

CVE Published

Sep 29, 2026 - 21:23 cve.org

CRITICAL 10.0

DescriptionCVE.org

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.

AnalysisAI

Toptech Systems TMS7 and TopHat expose a file export endpoint that lets any network-reachable, unauthenticated attacker submit a single crafted POST request and pull arbitrary database tables out of the system - an information disclosure of the highest severity as scored by CISA ICS (CVSS 10.0), and assessed by our analysis as AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, i.e. confidentiality-only impact with no integrity or availability effect. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Access

technique details hidden

Exploit

technique details hidden

Execution

technique details hidden

Impact

technique details hidden

Vulnerability AssessmentAI

Exploitation	No special conditions - remote unauthenticated exploitation against default configurations of Toptech Systems TMS7 and TopHat, requiring only network reachability to the file export endpoint and a single crafted POST request (AV:N/AC:L/PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H = 10.0) describes the maximally severe case: a network-reachable, unauthenticated, no-interaction flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Toptech's own advisory material points to TMS7 version 7.8 as the release that strengthens security, so the primary action is to upgrade TMS7 to 7.8 (vendor-released patch: TMS7 7.8) and to apply the corresponding vendor fix for TopHat as directed in CISA ICS advisory ICSA-26-272-02 - the published CPE data does not state a fixed TopHat version, so confirm the correct build with Toptech before scheduling maintenance. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, inventory every Toptech TMS7 (all versions) and TopHat deployment, determine which export endpoints are reachable from outside the trusted OT segment, and immediately block that endpoint at the perimeter firewall and any inter-segment ACLs; pull logs for POST requests to export paths to check for reconnaissance or exfiltration. …

Threat intelligence, references, and detailed analysis are available after sign-in.