AI analysis
CVE-2026-71189 is a cross-site scripting flaw (CWE-79) in Toptech TMS7 and TopHAT. A low-privileged attacker can construct a request that, if another application user issues it, runs attacker-supplied JavaScript in that user's browser in the context of their session with the application. Scored impact is limited mainly to confidentiality of the victim session (CVSS 4.0 base 4.8); user interaction is required, and integrity and availability are not scored as affected. The issue was assigned by CISA ICS-CERT and affects these terminal-management products, but the supplied data does not list specific version ranges. No public proof of concept is known and the CVE is not in CISA KEV.
What to do: Check the CISA ICS-CERT advisory and Toptech guidance for CVE-2026-71189 and install the vendor fix once a patched release is identified; no fixed version is stated in the supplied data. Until then, limit which accounts can create requests or content that other users will open, and investigate unexpected script execution in TMS7 or TopHAT browser sessions.
Affected
| Toptech TMS7 | — |
| Toptech TopHAT | — |
Estimated exposure
nicheNo basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.