Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-80233

CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CAYIN Technology CAYIN CMS-WS

Default version status: unaffected

  • 0 to ≤ 1.0.25336affected

CAYIN Technology CAYIN CMS-SE

Default version status: unaffected

  • 0 to ≤ 11.0.25336affected

CAYIN Technology CAYIN SMP

Default version status: unaffected

  • 0 to ≤ 4.0.25336affected

References