CVE-2024-7728: Cayin Technology CMS-SE

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

The specific CGI of the CAYIN Technology CMS does not properly validate user input, allowing a remote attacker with administrator privileges to inject OS commands into the specific parameter and execute them on the remote server.

Affected products

• Cayin Technology CMS-SE: version 11.0 only
• Cayin Technology CMS-SE18.04: version 11.0 only
• Cayin Technology CMS-SE22.04: version 11.0 only
• Cayintech CMS-SE: version 11.0 only
• Cayintech CMS-se\18.04\: version 11.0 only
• Cayintech CMS-se\22.04\: version 11.0 only

Published 2024-08-14. Last modified 2026-06-17.