CVE-2021-26639: This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this…

PriorityP340high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

0.39%

31.3th percentile

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
wisa	smart_wing_cms	< r18715.20211229	r18715.20211229
wisa_corp	smart_wing_cms	>= unspecified < r18715.20211229	r18715.20211229

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.