Search vulnerabilities

Results 2

Export CSV
CVE-2026-80233

CAYIN Technology|CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
CVE-2026-80234

CAYIN Technology|CAYIN CMS-WS/CMS-SE - Missing Authentication

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed