Is CVE-2026-71302 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-71302 being exploited in the wild.

How severe is CVE-2026-71302?

High severity, with a CVSS score of 7.1, published 29 September 2026.

Which products and versions are affected?

Toptech Systems TMS7 7.6.3; Toptech Systems TopHAT 7.6.3.

Is there a fix for CVE-2026-71302?

A patch was published on 2026: Fixed in version 7.8 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-71302 attacked?

It is attacked over the network.

Am I affected by CVE-2026-71302?

Check whether you run Toptech Systems TMS7 or Toptech Systems TopHAT at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-71302: Toptech TMS7 and TopHAT session fixation

CVE-2026-71302 · Severity: high · CVSS 7.1 · Published 2026-09-29

Toptech TMS7 and TopHAT are industrial control system software that manage critical infrastructure operations. The applications accept user-supplied session identifiers and fail to regenerate session IDs after authentication, allowing an attacker to hijack user sessions by predicting or reusing a known session ID. An attacker can impersonate legitimate users and gain unauthorized access to sensitive data or perform actions with victim privileges.

Technologies: Toptech Systems TMS7, Toptech Systems TopHAT. Vendors: Toptech Systems.

Quick answers

Is CVE-2026-71302 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-71302 being exploited in the wild.
How severe is CVE-2026-71302?: High severity, with a CVSS score of 7.1, published 29 September 2026.
Which products and versions are affected?: Toptech Systems TMS7 7.6.3; Toptech Systems TopHAT 7.6.3.
Is there a fix for CVE-2026-71302?: A patch was published on 2026: Fixed in version 7.8 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-71302 attacked?: It is attacked over the network.
Am I affected by CVE-2026-71302?: Check whether you run Toptech Systems TMS7 or Toptech Systems TopHAT at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is a session fixation vulnerability (CWE-384) where the application fails to regenerate the session token post-authentication. An unauthenticated network attacker can predefine a session identifier, trick a user into authenticating with that session ID, and then reuse the same session token to access the application with victim privileges. No patch is currently available in the tested versions (7.6.3), though Toptech Systems released version 7.8 with remediations.

Affected products

Toptech Systems TMS7 7.6.3
Toptech Systems TopHAT 7.6.3

Timeline

2026-09-29: disclosed
2026: patched: Fixed in version 7.8

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.