CVE-2026-80234

Description

CAYIN CMS-WS and CMS-SE developed by CAYIN Technology have a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain media file lists via specific functionality, resulting in partial information disclosure.

CVSS Vector

References

• https://www.twcert.org.tw/en/cp-139-11136-f7bd2-2.html
• https://www.twcert.org.tw/tw/cp-132-11130-4bcde-1.html