Tiandy Easy7 Integrated Management Platform vulnerabilities
3 known CVE vulnerabilities in Tiandy Easy7 Integrated Management Platform, translated and rated.
- CVE-2026-7698High
A vulnerability was identified in Tiandy Easy7 Integrated Management Platform version 7.17.0, affecting an unknown functionality of the file /Easy7/rest/systemInfo/updateDbBackupInfo. Manipulation of the argument week leads to OS command injection.
- CVE-2026-9466Medium
Tiandy Easy7 Integrated Management Platform version 7.17.0 has a vulnerability in the /rest/user/updateUserPassword API endpoint. Manipulation can lead to weak password recovery. The attack can be executed remotely, and the exploit has been publicly disclosed.
- CVE-2026-9465High
SQL Injection vulnerability in /Easy7/apps/WebService/GetDBDataEx.jsp of Tiandy Easy7 Integrated Management Platform 7.17.0. Manipulation of strTBName argument leads to SQL injection. Remote attack, exploit public. Vendor did not respond.