Skip to main content

Datiphy Data Management Center CVE-2026-76158

| EUVDEUVD-2026-63797 CRITICAL
External Control of File Name or Path (CWE-73)
2026-08-21 ZUSO ART GHSA-3g7v-7vpf-gwmm
Information Disclosure Data Management Center
9.3
CVSS 4.0 · Vendor: ZUSO ART
Share

Severity by source

Vendor (ZUSO ART) PRIMARY
9.3 CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
9.1 CRITICAL

Remote unauthenticated upload with no user interaction gives AV:N/AC:L/PR:N/UI:N; arbitrary file write drives I:H and A:H while direct confidentiality impact is absent (C:N).

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Primary rating from Vendor (ZUSO ART).

CVSS VectorVendor: ZUSO ART

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
Aug 21, 2026 - 02:50 vuln.today
CVE Published
Aug 21, 2026 - 02:02 cve.org
CRITICAL 9.3

DescriptionCVE.org

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.

AnalysisAI

Arbitrary file write in Datiphy Data Management Center versions 8.3.0 through 8.5.1 lets a remote, unauthenticated attacker place files anywhere on the host by abusing the upload API endpoint, which fails to constrain attacker-supplied file names or paths. Because uploaded content can escape the intended upload directory using relative or absolute path sequences, an attacker can overwrite critical files or drop executable payloads, threatening integrity and availability of the appliance. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach upload API over network
Delivery
Craft request with path traversal filename
Exploit
Write file outside upload directory
Execution
Overwrite executable or config file
Impact
Achieve code execution / disrupt service
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network reachability to the Datiphy Data Management Center upload API endpoint on a vulnerable instance (v8.3.0-v8.5.1); no authentication, credentials, or user interaction are needed per the CVSS 4.0 vector (PR:N/UI:N/AT:N). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment This is a genuine high-priority issue rather than an inflated CVSS score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker with only network access to the appliance sends a crafted request to the upload API with a filename containing '../../' or an absolute path, causing the service to write attacker-controlled content into a sensitive location such as a web root, startup script, or configuration file. By overwriting an executable or scheduled/loaded file, the attacker escalates the write primitive to code execution on the host. …
Remediation No vendor-released patch version is identified in the available data, so the specific fixed release could not be confirmed - consult the ZUSO advisory (https://zuso.ai/advisory) and Datiphy directly for an upgrade beyond 8.5.1 as the primary fix. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: identify all Datiphy Data Management Center instances running versions 8.3.0 through 8.5.1, determine their network exposure and business criticality, and prepare isolation procedures if needed. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Data Management Center

View all
CVE-2026-76156 CRITICAL
9.4 Aug 21

OS command injection in the Datiphy Data Management Center API endpoint (versions v8.3.0 through v8.5.1) lets an authent
CVE-2026-76155 CRITICAL
9.3 Aug 21

Administrative account takeover in Datiphy Data Management Center (v8.3.0 through v8.5.1) lets a remote attacker log int
CVE-2026-76157 HIGH
8.8 Aug 21

Unauthenticated arbitrary file upload in Datiphy Data Management Center v8.3.0 through v8.5.1 exposes the upload API end

Same weakness CWE-73 – External Control of File Name or Path

View all
CVE-2025-33053 HIGH POC
8.8
CVE-2023-4634 CRITICAL POC
9.8
CVE-2025-24054 MEDIUM POC
6.5
CVE-2025-0111 HIGH
7.1
CVE-2024-8517 CRITICAL POC
9.8
CVE-2024-55372 CRITICAL POC
9.8
CVE-2026-18048 HIGH POC
7.5
CVE-2024-55371 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2026-76158 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy