CVE-2026-72507
The "reportType" parameter in the product summary report feature within the balancing reports section is susceptible to a time-based blind SQL injection vulnerability.
- Published Sep 29, 2026
- CVSS 8.5 high
- 0.3% chance of exploitation in the next 30 days (EPSS)
Affected software
In the news
- Toptech TMS7 and TopHAT CISA ·