CVE-2026-69662

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-09-29

Last updated on: 2026-09-30

Assigner: ICS-CERT

Description

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-29

Last Modified

2026-09-30

Generated

2026-10-19

AI Q&A

2026-09-30

EPSS Evaluated

2026-10-18

NVD

CVE-2026-69662

EUVD

EUVD-2026-89475

Affected Vendors & Products

Vendor	Product	Version / Range
Toptech	Systems	TMS7 7.6.3
Toptech	Systems	TopHAT 7.6.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-95	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call (e.g. "eval").

Attack-Flow Graph

Executive Summary

This vulnerability involves the use of unsafe functions in an application that permit the execution of inline scripts and string evaluation. These functions can be exploited to run malicious code within the application's context, potentially leading to unauthorized actions or data access.

Detection Guidance

This vulnerability involves unsafe functions allowing inline script execution and string evaluation. Detection requires code review to identify unsafe functions like eval() or innerHTML. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to execute arbitrary scripts, leading to data theft, session hijacking, or unauthorized system access. Users with limited privileges might also perform actions beyond their intended scope if inline scripts are improperly handled.

Compliance Impact

This vulnerability could violate compliance requirements by enabling unauthorized data access or modification, which is a direct breach of GDPR and HIPAA. It undermines data integrity and confidentiality, risking legal penalties and reputational damage.

Mitigation Strategies

Replace unsafe functions like eval() and innerHTML with safer alternatives such as textContent or DOMPurify for sanitization. Review and update application code to avoid inline script execution and string evaluation.

Hi! I’m here to help you understand CVE-2026-69662. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70