Paper/Archive/CVE-2026-76156

CVE-2026-76156

Datiphy Inc. Data Management Center — Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command

EPSS 1%CVSS 9.4

critical.is priorityof 100

CVSS 9.4 (CNA)9.4 / 10 × 3028.2 Not in CISA KEV+300.0 EPSS percentile 65.7.657 × 2013.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root.

Affected

ProductAffectedFixed inSource

Data Management Centerv8.3.0 – v8.5.1–CNA

Scores by source

ZUSO ART (CNA)9.4CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

writeupzuso.ai/advisory