CVE-2021-26639: Wisa Smart Wing CMS

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.

Affected products

• Wisa Smart Wing CMS: before r18715.20211229 (fixed in r18715.20211229)

Published 2022-08-17. Last modified 2026-06-17.