CAYIN Technology vulnerabilities
Published CVEs affecting CAYIN Technology products: 3 record(s), with severity, exploitation and fixes.
CAYIN CMS-SE 2CAYIN CMS-WS 2SMP-PROPLUS 1CAYIN SMP 1SMP-NEO 1SMP-NEO2 1SMP-PRO4 1SMP-200 1SMP-300 1SMP-WEB4 1SMP-WEBPLUS 1SMP-8000QD 1SMP-1000 1SMP-2000 1SMP-2100 1SMP-2200 1SMP-2210 1SMP-2300 1SMP-2310 1SMP-4000 1SMP-6000 1SMP-8000 1
CVE-2026-80234
Medium · 5.3
CWE-306 Aug 26, 2026
CAYIN Technology｜CAYIN CMS-WS/CMS-SE - Missing Authentication
CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.
CVE-2026-80233
High · 7.2
CWE-434 Aug 26, 2026
CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.
CVE-2020-36910
High · 8.8
CWE-78 Jan 6, 2026
Cayin Signage Media Player 3.0 Authenticated Remote Command Injection via NTP Parameter
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploit the 'NTP_Server_IP' parameter with default credentials to execute arbitrary shell commands as root.