AI analysis
CVE-2026-63713 is a time-based blind SQL injection (CWE-89) in the search parameter of the view audit logs feature in the utilities section of Toptech TMS7 and TopHAT. A remote attacker who already has high privileges can send a crafted search value with no user interaction; CVSS 4.0 rates the issue 8.5 (high), with high confidentiality and availability impact and low integrity impact on both the vulnerable system and subsequent systems. The flaw is relevant to operators of these terminal-management systems, which are used in industrial bulk-liquid terminal environments and were coordinated by ICS-CERT. Exact affected version ranges are not stated in the supplied data. It is not listed in CISA KEV, and no public proof-of-concept is known.
What to do: Apply the vendor or ICS-CERT update for TMS7 and TopHAT as soon as a fixed build is published, and until then restrict network access to the utilities audit-log view to trusted administrative hosts. Because the issue needs a high-privilege account, review those accounts and look for unusual or slow search queries against audit logs. Do not rely on a specific version number until the vendor advisory names the affected and fixed releases.
Affected
| Toptech TMS7 | — |
| Toptech TopHAT | — |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.