CVE-2026-4221 | Tiandy Easy7 Integrated Management Platform 7.17.0 Endpoint uploadLedImage File unrestricted upload

A vulnerability labeled as critical has been found in Tiandy Easy7 Integrated Management Platform 7.17.0. This affects an unknown part of the file /rest/file/uploadLedImage of the component Endpoint. The manipulation of the argument File results in unrestricted upload.

This vulnerability is cataloged as CVE-2026-4221. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.