Vendors / CAYIN Technology Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now CAYIN Technology records in CISA KEV No CAYIN Technology vulnerabilities are listed in CISA KEV.
Priority HIGH 73
Cayin Signage Media Player 3.0 contains an authenticated remote command injection vulnerability in system.cgi and wizard_system.cgi pages.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01433 · Published 2026-01-06 · No fix listed CWE-78
Priority MEDIUM 41
CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability.
CVSS 4.0 HIGH 8.6· Network · High privileges · No interaction · EPSS 0.0082 · Published 2026-08-26 · No fix listed CWE-434
Priority MEDIUM 40
The CAYIN Technology CMS lacks proper access control, allowing unauthenticated remote attackers to download arbitrary CGI files.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00616 · Published 2024-08-14 · No fix listed CWE-552
Priority LOW 37
CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00503 · Published 2026-08-26 · No fix listed CWE-306
Priority LOW 35
The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remot…
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00721 · Published 2024-08-14 · No fix listed CWE-78
Open these records in search → All records by CVSS severity
0 4 1 0 0
THREATIST.IORead the docs