PT-2026-8336 · Tr7 Cyber ​​Defense · Web Application Firewall

Regaip Kurt · Published 2026-02-16 · Updated 2026-02-16 · CVE-2025-2418

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TR7 Cyber Defense Inc. Web Application Firewall versions 4.30 through 16022026

Description A flaw exists in the TR7 Cyber Defense Inc. Web Application Firewall that allows for URL redirection to untrusted sites, potentially enabling phishing attacks. The issue involves an 'Open Redirect' condition.

Recommendations Update to a version after 16022026.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-2418

Affected Products

Web Application Firewall

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-2418 · Security Note
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0066 · Note
• https://usom.gov.tr/bildirim/tr-26-0066 · Note
• https://twitter.com/CVEnew/status/2023365895280533605 · Twitter Post
• https://t.me/CVEtracker/44814 · Telegram Post