Datiphy Inc. Data Management Center vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Datiphy Inc. Data Management Center: 4 record(s), with affected versions and fixes.
CVE-2026-76158
Critical · 9.3
CWE-73 Aug 21, 2026
Datiphy Data Management Center - External Control of File Name or Path
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.
CVE-2026-76157
High · 8.8
CWE-306 Aug 20, 2026
Datiphy Data Management Center - Missing Authentication for Critical Function
Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.
CVE-2026-76156
Critical · 9.4
CWE-78 Aug 20, 2026
Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command
OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root.
CVE-2026-76155
Critical · 9.3
CWE-1392 Aug 20, 2026
Datiphy Data Management Center - Use of Default Credentials
Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials.