CVE-2026-4187

Name of the Vulnerable Software and Affected Versions Tiandy Easy7 Integrated Management Platform version 7.17.0

Description A security issue exists in Tiandy Easy7 Integrated Management Platform 7.17.0. The issue affects an unknown function within the Device Identifier Handler component, specifically the file /WebService/UpdateLocalDevInfo.jsp. Manipulation of the username/password arguments can bypass authentication. The attack can be initiated remotely. The exploit is publicly available. The vendor was contacted but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.