Skip to main content

Datiphy DMC CVE-2026-76155

| EUVDEUVD-2026-63795 CRITICAL
Use of Default Credentials (CWE-1392)
2026-08-21 ZUSO ART GHSA-7q54-468c-p268
Information Disclosure Data Management Center
9.3
CVSS 4.0 · Vendor: ZUSO ART
Share

Severity by source

Vendor (ZUSO ART) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.8 CRITICAL

Publicly known default credentials over the network require no earned privileges (PR:N) and no interaction; full admin control gives high C/I/A with unchanged scope.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (ZUSO ART).

CVSS VectorVendor: ZUSO ART

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 21, 2026 - 02:14 vuln.today
CVE Published
Aug 21, 2026 - 01:40 cve.org
CRITICAL 9.3

DescriptionCVE.org

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentials.

AnalysisAI

Administrative account takeover in Datiphy Data Management Center (v8.3.0 through v8.5.1) lets a remote attacker log into the management platform using shipped default administrator credentials, granting full control over the database-activity-monitoring console. Rated CVSS 4.0 9.3 (critical) with a fully network-reachable, unauthenticated vector, though no public exploit identified at time of analysis and no CISA KEV listing exists. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach DMC management interface
Delivery
Submit default admin credentials
Exploit
Obtain administrative session
Execution
Modify or disable auditing policies
Impact
Exfiltrate database activity data
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires that the affected DMC instance (v8.3.0-v8.5.1) still uses the factory default administrator credentials AND that the attacker has network reachability to the management interface. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment Signals are consistent and point to genuine priority where the product is exposed: the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) describes trivially automatable, unauthenticated network exploitation with high confidentiality, integrity, and availability impact on the vulnerable system (VC:H/VI:H/VA:H), yielding a 9.3 critical score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who can reach the DMC management interface - from the internet if exposed, or from an adjacent network segment - browses to the login page and authenticates with the product's documented default administrator credentials. With administrative access they can alter or disable database auditing policies, exfiltrate captured database activity data, and pivot within the monitored environment. …
Remediation No vendor-released patch identified at time of analysis, so the primary and immediately actionable control is to change the default administrator credentials on every DMC instance to a strong, unique password (and rotate any other factory accounts) - this directly removes the vulnerable condition without functional side effects. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: identify all Datiphy Data Management Center deployments running versions 8.3.0 through 8.5.1 and isolate administrative interfaces from public network access; implement firewall rules restricting console access to trusted internal IPs or VPN endpoints only. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Data Management Center

View all
CVE-2026-76156 CRITICAL
9.4 Aug 21

OS command injection in the Datiphy Data Management Center API endpoint (versions v8.3.0 through v8.5.1) lets an authent
CVE-2026-76158 CRITICAL
9.3 Aug 21

Arbitrary file write in Datiphy Data Management Center versions 8.3.0 through 8.5.1 lets a remote, unauthenticated attac
CVE-2026-76157 HIGH
8.8 Aug 21

Unauthenticated arbitrary file upload in Datiphy Data Management Center v8.3.0 through v8.5.1 exposes the upload API end

Same weakness CWE-1392 – Use of Default Credentials

View all
CVE-2026-26341 CRITICAL POC
9.8
CVE-2026-26366 CRITICAL POC
9.8
CVE-2026-58453 CRITICAL POC
9.3
CVE-2026-41939 CRITICAL POC
9.3
CVE-2024-4007 HIGH POC
8.7
CVE-2026-1803 HIGH POC
8.1
CVE-2025-6529 HIGH POC
7.4
CVE-2025-1160 MEDIUM POC
6.9

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-76155 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy