What’s Vulnerable › Vulnerabilities

CVE-2026-7185: Unauthorized access to files in T-Systems products

• Severity: medium (CVSS 6.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-06 · updated 2026-07-06
• Weakness: CWE-22

Description

A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow an attacker capable of interacting with the affected feature to attempt to access file system resources outside the scope intended by the application.

Affected products

• T-Systems Archivo: before 2602.00 — fixed in 2602.00
• T-Systems Buroweb: before 2602.00 — fixed in 2602.00
• T-Systems eStima: before 2602.00 — fixed in 2602.00
• T-Systems MyTAO: before 2602.00 — fixed in 2602.00

How to fix

Upgrade to a fixed version: T-Systems Archivo 2602.00; T-Systems Buroweb 2602.00; T-Systems eStima 2602.00; T-Systems MyTAO 2602.00. Check the vendor advisory for mitigations.

References

• https://www.incibe.es/en/incibe-cert/notices/aviso/unauthorized-access-files-t-systems-products

Get alerted when CVE-2026-7185 or the next vulnerability affects your stack