Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2026-76156

Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root.

CVSS 4.0 · 9.4 Critical EPSS 1.1% KEV · Not listed
Vendors
Datiphy
Products
Data Management Center
CVE-2026-76155

Datiphy Data Management Center - Use of Default Credentials

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Datiphy
Products
Data Management Center
CVE-2026-76158

Datiphy Data Management Center - External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Datiphy
Products
Data Management Center
CVE-2026-76157

Datiphy Data Management Center - Missing Authentication for Critical Function

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Datiphy
Products
Data Management Center