Medium severity · published Jul 6, 2026
CVE-2026-7185
Unauthorized access to files in T-Systems products
6.0
CVSS
0.4%
EPSS
No
On KEV
Description
A validation vulnerability has been identified in certain web features related to file management or upload in several products of the TAO 2.0 suite. This vulnerability could allow an attacker capable of interacting with the affected feature to attempt to access file system resources outside the scope intended by the application.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Archivo · T-Systems
before 2602.00 · source: vendor
BU
Buroweb · T-Systems
before 2602.00 · source: vendor
MY
MyTAO · T-Systems
before 2602.00 · source: vendor
ES
eStima · T-Systems
before 2602.00 · source: vendor