Tiandy
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Easy7 Integrated Management Platform | 9 | – | May 25, 2026 |
| Video Surveillance System 视频监控平台 | 2 | – | Mar 9, 2026 |
| Easy7 CMS Windows | 1 | – | Mar 9, 2026 |
| Integrated Management Platform | 1 | – | Mar 16, 2026 |
Exploited and recent CVEs
- CVE-2026-9466 Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery 0.4%
- CVE-2026-9465 Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection 0.3%
- CVE-2026-7698 Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection 2.7%
- CVE-2026-4585 Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection 4.5%
- CVE-2026-4289 Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection 0.3%
- CVE-2026-4288 Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection 0.3%
- CVE-2026-4287 Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection 0.3%
- CVE-2026-4232 Tiandy Integrated Management Platform getAuthorityByUserId sql injection 0.3%
- CVE-2026-4221 Tiandy Easy7 Integrated Management Platform Endpoint uploadLedImage unrestricted upload 0.3%
- CVE-2026-4187 Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication 0.5%
- CVE-2026-3818 Tiandy Easy7 CMS Windows GetDBData.jsp sql injection 0.5%
- CVE-2026-3797 Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload 0.4%
- CVE-2026-2985 Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery 0.3%