The vulnerability identified as CVE-2026-63713 affects Toptech Systems TMS7 version 7.6.3. It is a time-based blind SQL injection in the "search" parameter of the view audit logs feature under utilities. This flaw allows an attacker with high privileges to perform SQL injection attacks that can compromise confidentiality, partially affect integrity, and severely impact availability. The CVSS 3.1 base score is 9.0, indicating critical severity with network attack vector, low attack complexity, no user interaction, and scope change.

Successful exploitation can lead to unauthorized disclosure of sensitive data (high confidentiality impact), partial modification or corruption of data (low integrity impact), and disruption or denial of service (high availability impact). The attacker requires high privileges to exploit this vulnerability, which limits the attack surface but does not eliminate the critical risk.

No official patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected feature to trusted users only and monitor for suspicious activity related to the audit logs search functionality.