Medium severity6.3NVD Advisory· Published Mar 9, 2026· Updated Apr 29, 2026
CVE-2026-3797
CVE-2026-3797
Description
A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLS_REST_File.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
1- cpe:2.3:o:tiandy:video_surveillance_system_firmware:7.17.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- my.feishu.cn/docx/P3Bgdl9BHocn66xCMpCcgCD7nhenvdPermissions Required
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.