CVE-2026-80234 in Cms-Ws

Resumen

por MITRE • 2026-08-26

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsable: Twcert
• Reservar: 2026-08-26
• Divulgación: 2026-08-26
• Moderación: aceptado
• Artículo: VDB-395719
• CPE: listo
• CWE: CWE-306 (confirmado)
• CVSS: 5.3 (CNA)
• EPSS: 0.00000
• KEV: no
• Actividades: muy bajo
• Sector: Lawfirm, Hostingprovider, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-80234
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-80234
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-80234/