CVE-2025-2418: Open Redirect in TR7's Web Application Firewall

Severity: medium (CVSS 4.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-02-16 · updated 2026-06-17
Weakness: CWE-601

Description

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in TR7 Cyber Defense Inc. Web Application Firewall allows Phishing. This issue affects Web Application Firewall: from 4.30 before v1.4.0.117.

Affected products

TR7 Cyber Defense Inc. Web Application Firewall: from 4.30 before v1.4.0.117 — fixed in v1.4.0.117

How to fix

Upgrade to a fixed version: TR7 Cyber Defense Inc. Web Application Firewall v1.4.0.117. Check the vendor advisory for mitigations.

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0066
https://www.usom.gov.tr/bildirim/tr-26-0066

Get alerted when CVE-2025-2418 or the next vulnerability affects your stack