CVE Intelligence

CAYIN Technology CAYIN CMS-WS vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting CAYIN Technology CAYIN CMS-WS: 2 record(s), with affected versions and fixes.

CVE-2026-80234 Medium · 5.3 CWE-306 Aug 26, 2026
CAYIN Technology|CAYIN CMS-WS/CMS-SE - Missing Authentication
CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.
CVE-2026-80233 High · 7.2 CWE-434 Aug 26, 2026
CAYIN Technology|CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.