CVE-2026-71302

The Toptech TMS7 and TopHAT applications are vulnerable to a session fixation flaw. The software accepts user-supplied session identifiers and fails to regenerate the session ID upon successful authentication. This allows an attacker to predefine a session ID and reuse it after a victim authentic...