CVE-2026-80234 in Cms-Ws

Summary

by MITRE • 08/26/2026

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: Twcert
• Reservation: 08/26/2026
• Disclosure: 08/26/2026
• Moderation: accepted
• Entry: VDB-395719
• CPE: ready
• CWE: CWE-306 (confirmed)
• CVSS: 5.3 (CNA)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Lawfirm, Agriculture, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-80234
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80234
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-80234/