Cayin Technology
7 CVEs across 34 Cayin Technology products. Browse Cayin Technology vulnerabilities, severities, and proof-of-concept exploits.
Cayin Technology products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-80234 | Medium | 5.3 | 2026-08-26 | CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists… |
CVE-2026-80233 | High | 7.2 | 2026-08-26 | CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload… |
CVE-2020-36910 | High | 8.8 | 2026-01-06 | Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages. Attackers can exploi… |
CVE-2024-7729 | High | 7.5 | 2024-08-14 | The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files. |
CVE-2024-7728 | High | 7.2 | 2024-08-14 | The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS comma… |
CVE-2020-7357 | Critical | 9.6 | 2020-08-06 | Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute ar… |
CVE-2020-7356 | Critical | 10.0 | 2020-08-06 | CAYIN xPost suffers from an unauthenticated SQL Injection vulnerability. Input passed via the GET parameter 'wayfinder_seqid' in wayfinder_meeting_input.jsp is… |