HIGH 8.6 NVD

CVE-2026-80233

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload

CAYIN CMS-WS, CMS-SE, and SMP series products developed by CAYIN Technology have an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shells backdoors, thereby enabling arbitrary code execution on the server.

References

https://www.twcert.org.tw/en/cp-139-11135-189f7-2.html
https://www.twcert.org.tw/tw/cp-132-11129-4a040-1.html

Published: 2026-08-26 · Source: NVD · Feed updated: 2026-08-26

This high severity vulnerability with a CVSS score of 8.6 was published on 2026-08-26 via NVD.

vulnfeed aggregates 11364 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.