Skip to main content

CAYIN CMS CVE-2026-80234

| EUVDEUVD-2026-66343 MEDIUM
Missing Authentication for Critical Function (CWE-306)
2026-08-26 twcert GHSA-jwcj-5v46-v98v
Information Disclosure Authentication Bypass Cayin Cms Ws Cayin Cms Se
6.9
CVSS 4.0 · Vendor: twcert
Share

Severity by source

Vendor (twcert) PRIMARY
6.9 MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
5.3 MEDIUM

Network-accessible unauthenticated endpoint with no complexity barriers; impact limited to low confidentiality (media file list only), no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (twcert).

CVSS VectorVendor: twcert

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
CVSS changed
Aug 26, 2026 - 15:52 NVD
5.3 (MEDIUM) 6.9 (MEDIUM)
Analysis Generated
Aug 26, 2026 - 09:20 vuln.today

DescriptionCVE.org

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.

AnalysisAI

Missing authentication on a specific API endpoint in CAYIN CMS-WS and CMS-SE allows unauthenticated remote attackers to retrieve media file lists, resulting in partial information disclosure. All versions of both products are affected per CPE data, and the vulnerability requires no credentials, no user interaction, and no special network position - only HTTP reachability to the CMS instance. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify internet-facing CMS instance
Exploit
Send unauthenticated HTTP request to media listing endpoint
Execution
Receive media file enumeration response
Impact
Use asset list for reconnaissance or targeted follow-on activity
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No special conditions beyond network reachability to the CAYIN CMS-WS or CMS-SE web interface - the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms remote unauthenticated exploitation against default configurations. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 3.1 base score of 5.3 (Medium) is consistent with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, reflecting a low-complexity, unauthenticated network attack with limited confidentiality impact and no integrity or availability impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated attacker with HTTP access to a CAYIN CMS-WS or CMS-SE instance sends a crafted request to the unauthenticated media listing endpoint, receiving a structured list of media files managed by the signage system. No public exploit code has been identified, but the attack requires only a standard HTTP client and knowledge of the endpoint path, making it low-effort once the endpoint is identified through documentation or scanning.
Remediation Consult the TWCERT advisories at https://www.twcert.org.tw/tw/cp-132-11130-4bcde-1.html and https://www.twcert.org.tw/en/cp-139-11136-f7bd2-2.html for vendor-issued patch guidance; no specific fixed version number is derivable from the available intelligence data. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Cayin Cms Ws

View all
CVE-2026-80233 HIGH
8.6 Aug 26

Arbitrary file upload leading to remote code execution affects CAYIN Technology's CMS-WS, CMS-SE, and SMP series digital

Same weakness CWE-306 – Missing Authentication for Critical Function

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2024-11680 CRITICAL POC
9.8
CVE-2024-51567 CRITICAL POC
9.8
CVE-2025-0108 HIGH POC
8.8
CVE-2025-32433 CRITICAL POC
10.0
CVE-2016-2004 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-80234 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy