Tiandy

Products

ProductCVEsExploitedLatest
Easy7 Integrated Management Platform9–May 25, 2026
Video Surveillance System 视频监控平台2–Mar 9, 2026
Easy7 CMS Windows1–Mar 9, 2026
Integrated Management Platform1–Mar 16, 2026

Exploited and recent CVEs

  • CVE-2026-9466 Medium 5.3 Tiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery 0.4%
  • CVE-2026-9465 High 7.3 Tiandy Easy7 Integrated Management Platform GetDBDataEx.jsp sql injection 0.3%
  • CVE-2026-7698 High 7.3 Tiandy Easy7 Integrated Management Platform updateDbBackupInfo os command injection 2.7%
  • CVE-2026-4585 Critical 9.8 Tiandy Easy7 Integrated Management Platform Configuration ImportSystemConfiguration.jsp os command injection 4.5%
  • CVE-2026-4289 High 7.3 Tiandy Easy7 Integrated Management Platform getRecByTemplateId sql injection 0.3%
  • CVE-2026-4288 High 7.3 Tiandy Easy7 Integrated Management Platform Endpoint getDevDetailedInfo sql injection 0.3%
  • CVE-2026-4287 High 7.3 Tiandy Easy7 Integrated Management Platform Endpoint queryResources sql injection 0.3%
  • CVE-2026-4232 High 7.3 Tiandy Integrated Management Platform getAuthorityByUserId sql injection 0.3%
  • CVE-2026-4221 High 7.3 Tiandy Easy7 Integrated Management Platform Endpoint uploadLedImage unrestricted upload 0.3%
  • CVE-2026-4187 Medium 5.3 Tiandy Easy7 Integrated Management Platform Device Identifier UpdateLocalDevInfo.jsp missing authentication 0.5%
  • CVE-2026-3818 High 7.3 Tiandy Easy7 CMS Windows GetDBData.jsp sql injection 0.5%
  • CVE-2026-3797 Medium 6.3 Tiandy Video Surveillance System 视频监控平台 CLS_REST_File.java uploadFile unrestricted upload 0.4%
  • CVE-2026-2985 Medium 6.3 Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery 0.3%