CVE-2026-69662

LowCVSS 3.7/10Last modified Sep 30, 2026

Description

The application uses unsafe functions that allow execution of inline scripts and string evaluation functions.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-95

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
Toptech SystemsTMS77.6.3
Toptech SystemsTopHAT7.6.3

References

Timeline

Published
Sep 29, 2026
Last modified
Sep 30, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-696648.7Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP inets httpd allows an unauthenticated remote attacker to caCVE-2026-696658.5SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions. If this vulnerability is exploited, an attackeCVE-2026-696698.8Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network.CVE-2026-69676.5Missing expiration, hash, and length enforcement in delegated metadata validation in awslabs/tough before tough-v0.22.0 allows remote authenCVE-2026-696718.8Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.CVE-2026-696725.5Use of uninitialized resource in Windows DNS allows an authorized attacker to disclose information locally.CVE-2026-696737.8Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locallyCVE-2026-696745.5Missing authentication for critical function in Windows Modern Device Management (MDM) allows an authorized attacker to bypass a security feCVE-2026-696755.5Out-of-bounds read in Windows Network File System allows an authorized attacker to disclose information locally.CVE-2026-696768.8Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network.CVE-2026-696788.8Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.CVE-2026-696795.7Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service over an adjacent network.
CVE-2026-69662: Low severity, CVSS 3.7 | Vulnix