CAYIN Technology vulnerabilities
We track 2 vulnerabilities in CAYIN Technology products across 6 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 26, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest CAYIN Technology vulnerabilities
- 7.2 High severity
CAYIN CMS-WS: Unrestricted Upload of File with Dangerous Type
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.
- 7.2 High severity
CMS-SE(22.04): Improper Neutralization of Special Elements used in an OS Command
The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.