Tiandy Easy7 Integrated Management Platform vulnerabilities

CVE-2026-4585 [CRITICAL] CWE-77 CVE-2026-4585: A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vul A vulnerability has been found in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/ImportSystemConfiguration.jsp of the component Configuration Handler. The manipulation of the argument File leads to os command injection. The attack can be initiated remotely. The expl

CVE-2026-7698 [HIGH] CWE-77 CVE-2026-7698: A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by th A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Affected by this vulnerability is an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Such manipulation of the argument week leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be us

CVE-2026-4221 [HIGH] CWE-284 CVE-2026-4221: A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unk A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unknown part of the file /rest/file/uploadLedImage of the component Endpoint. The manipulation of the argument File results in unrestricted upload. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contac

CVE-2026-4287 [HIGH] CWE-74 CVE-2026-4287: A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affec A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be initiated remotely. The exploit has been released to the p

CVE-2026-9465 [HIGH] CWE-74 CVE-2026-9465: A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability A vulnerability was found in Tiandy Easy7 Integrated Management Platform 7.17.0. This vulnerability affects unknown code of the file /Easy7/apps/WebService/GetDBDataEx.jsp. Performing a manipulation of the argument strTBName results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The ven

CVE-2026-4289 [HIGH] CWE-74 CVE-2026-4289: A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17 A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0. This affects an unknown function of the file /rest/preSetTemplate/getRecByTemplateId. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor

CVE-2026-4288 [HIGH] CWE-74 CVE-2026-4288: A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted e A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0. The impacted element is an unknown function of the file /rest/devStatus/getDevDetailedInfo of the component Endpoint. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the p

CVE-2026-4187 [MEDIUM] CWE-287 CVE-2026-4187: A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Impacted is an A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0. Impacted is an unknown function of the file /WebService/UpdateLocalDevInfo.jsp of the component Device Identifier Handler. Such manipulation of the argument username/password leads to missing authentication. The attack can be launched remotely. The exploit is publicl

CVE-2026-9466 [MEDIUM] CWE-640 CVE-2026-9466: A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7.17.0. This issue aff A vulnerability was determined in Tiandy Easy7 Integrated Management Platform 7.17.0. This issue affects some unknown processing of the file /rest/user/updateUserPassword of the component API Endpoint. Executing a manipulation can lead to weak password recovery. The attack can be executed remotely. The exploit has been publicly disclosed and may be ut