Back to Database
Status published
High
CVE-2021-26639
WISA Smart Wing CMS File Download Vulnerability
Vulnerability Description
This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-26639
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
WISA corp.
View all reports →Affected Software
Smart Wing CMS
Vulnerable Versions:
unspecified
Timeline
Official Publish:
August 17th, 2022
Last Modified:
August 3rd, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N