CVE-2026-4287

Tiandy Easy7 Integrated Management Platform Endpoint (version 7.17.0) has a SQL injection in the /rest/devStatus/queryResources function when areaId is manipulated. The vulnerability is exploitable remotely; a public exploit reportedly exists. The vendor was contacted but did not respond. No reme...