CVE-2026-69662 LOW

CVE-2026-69662: Toptech TMS7 and TopHAT Eval Injection

Vendor Toptech Systems
Product TMS7
Weakness CWE-95 · Eval injection
Published September 29, 2026
Last update September 29, 2026
View on NVD All CVEs

CVSS base score

3.7/10
Attack vector Adjacent
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

Key dates

02Disclosure timeline

September 29, 2026 CVE published

Related vulnerabilities

04Related CVE

CVE-2024-3562 Custom Field Suite <= 2.6.7 - Authenticated (Contributor+) PHP Code Injection via Loop Custom Field CVE-2025-8420 Multiple Plugins by emarket-design <= Multiple Versions - Unauthenticated Limited Remote Code Execution CVE-2026-45293 WordPress Coding Standards (WordPressCS) contains an arbitrary code execution vulnerability CVE-2011-10033 WordPress Plugin is-human <= v1.4.2 Eval Injection RCE CVE-2024-10633 Quiz Maker Business, Developer, and Agency <= (Multiple Versions) - Unauthenticated Arbitrary Shortcode Execution via content