CVE-2026-71189 is a cross-site scripting (XSS) vulnerability in Toptech Systems TMS7 version 7.6.3. An attacker can craft a request that, when executed by another user, causes attacker-supplied JavaScript to run in the victim's browser within their session context. The vulnerability has a low CVSS score of 3.5, indicating limited impact. There is no information on available patches or vendor advisories. No known exploits are reported in the wild.