CAYIN Technology CAYIN CMS-WS vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting CAYIN Technology CAYIN CMS-WS: 2 record(s), with affected versions and fixes.
CVE-2026-80234
Medium · 5.3
CWE-306 Aug 26, 2026
CAYIN Technology|CAYIN CMS-WS/CMS-SE - Missing Authentication
CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.
CVE-2026-80233
High · 7.2
CWE-434 Aug 26, 2026
CAYIN Technology|CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.