Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiandy/easy7/core/rest/CLS_REST_File.java. The manipulation of the argument fileName leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-09 | 3 | Disclosure3 |
| 2026-03-10 | 1 | Disclosure1 |
⚡ New CVE Alert: CVE-2026-3797 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-3797 #CVE-2026-3797 #CVE #Medium #CyberSecurity #InfoSec https://t.co/DGRVp76Cku
Post summary
A brief alert announcing CVE-2026-3797 with a medium severity rating of 6.3, providing an NVD reference but no further technical or mitigation details.
🚨*CVE* CVE-2026-3797 A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiand… https://www.cve.org/CVERecord?id=CVE-2026-3797 ----- Traducción: CVE-2026-37… http://infoflow.cloud`
Post summary
The tweet announces the discovery of CVE-2026-3797 in Tiandy Video Surveillance System, specifying the impacted function without mentioning any PoC, exploit, or remediation.
CVE-2026-3797 A security vulnerability has been detected in Tiandy Video Surveillance System 视频监控平台 7.17.0. The impacted element is the function uploadFile of the file /src/com/tiand… https://www.cve.org/CVERecord?id=CVE-2026-3797
Post summary
A new vulnerability (CVE-2026-3797) was identified in Tiandy Video Surveillance System 7.17.0, affecting the uploadFile function within /src/com/tiand… with no PoC, exploit, or active exploitation reported.
CVE-2026-3797 Unauthenticated Remote File Upload Exploit in Tiandy Video Surveillance System 7.17.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3797
Post summary
The post announces CVE-2026-3797, an unauthenticated remote file upload vulnerability in Tiandy Video Surveillance System 7.17.0, with a link to vulnerability details but no proof‑of‑concept or exploit information.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | tiandy | video_surveillance_system | - | - | - |
| OS | tiandy | video_surveillance_system_firmware | 7.17.0 | - | - |