Tiandy

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Tiandy records in CISA KEV

No Tiandy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy7 Cms 1 record HIGH Tiandy Ip Camera Firmware 1 record LOW Video Surveillance System Firmware 1 record MEDIUM

Records

14 records

TI-2026-08313 CVE-2026-9466 · GHSA-7frc-fvv8-6vw2

Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery

HIGH 70

A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00352 Published 2026-05-25 No fix listed CWE-640

TI-2026-08312 CVE-2026-9465 · GHSA-3g5p-qv44-mwhx

Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection

HIGH 70

A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00319 Published 2026-05-25 No fix listed CWE-74

TI-2026-06780 CVE-2026-7698 · GHSA-vhmq-jwc2-p48f

Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection

HIGH 70

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0272 Published 2026-05-03 No fix listed CWE-77

TI-2026-03734 CVE-2026-4289 · GHSA-7w3v-mfh5-q7x3

Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection

HIGH 70

A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0027 Published 2026-03-17 No fix listed CWE-74

TI-2026-03733 CVE-2026-4288 · GHSA-fj7g-gh2h-jx3m

Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection

HIGH 70

A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0027 Published 2026-03-17 No fix listed CWE-74

TI-2026-03732 CVE-2026-4287 · GHSA-rjxq-j5v8-3c89

Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection

HIGH 70

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0027 Published 2026-03-16 No fix listed CWE-74

TI-2026-03679 CVE-2026-4232 · GHSA-xrj6-x752-mhrf

Tiandy Integrated Management Platform getAuthorityByUserId sql injection

HIGH 70

A vulnerability was determined in Tiandy Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0027 Published 2026-03-16 No fix listed CWE-74

TI-2026-03634 CVE-2026-4187 · GHSA-xcmw-c5v3-hvv7

Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication

HIGH 70

A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00535 Published 2026-03-15 No fix listed CWE-287

TI-2026-03307 CVE-2026-3818 · GHSA-jhpx-cpvq-8cwm

Tiandy Easy7 CMS Windows GetDBData.jsp sql injection

HIGH 70

A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00462 Published 2026-03-09 No fix listed CWE-74

TI-2026-03286 CVE-2026-3797 · GHSA-g3m6-556h-mp43

Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload

MEDIUM 57

A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00391 Published 2026-03-09 No fix listed CWE-284

TI-2026-02576 CVE-2026-2985 · GHSA-3mqj-x3cm-3wgr

Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery

MEDIUM 57

A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00335 Published 2026-02-23 No fix listed CWE-918

TI-2026-03989 CVE-2026-4585 · GHSA-q4p4-47vp-j2h2

Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection

MEDIUM 55

A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.04548 Published 2026-03-23 No fix listed CWE-77

TI-2017-11154 CVE-2017-15236 · GHSA-5mj8-9833-w3h6

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol…

LOW 39

Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a crafted request to TCP port 3001, as demonstrated by config* files and extendwor…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03609 Published 2017-10-11 No fix listed CWE-200

TI-2026-03668 CVE-2026-4221 · GHSA-65rf-q535-88ch

Tiandy Easy7 Integrated Management Platform Endpoint uploadLedImage unrestricted upload

LOW 36

A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00295 Published 2026-03-16 No fix listed CWE-284

Open these records in search →

Critical	1
High	1
Medium	12
Low	0
No CVSS	0