CVE-2026-112039 diem-project CVE debrief

Who should care

Defenders responsible for diem-project diem deployments should assess exposure and prioritize verification of remote exploitation feasibility. This includes operators, platform administrators, vulnerability management teams, and security teams who need to ensure the integrity of Administrative Console functionality. They must verify affected deployments in their inventory and implement necessary controls to mitigate potential risks associated with this XSS

Why it matters

CVE-2026-112039 is a cross-site scripting vulnerability in diem-project diem Administrative Console. Defenders should prioritize verifying exposure and assessing remote exploitation feasibility.

• Remote exploitation could lead to unauthorized script execution
• Defenders must verify exposure in their inventory
• Implementing compensating controls for Administrative Console is crucial

Technical summary

The function append in dmAdminPlugin/modules/dmConsole/actions/actions.class.php is vulnerable to cross-site scripting via the dm_command argument. This vulnerability affects diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Defenders should prioritize verifying exposure and assessing remote exploitation feasibility in their inventory. The vulnerability allows remote attackers to execute scripts, potentially leading to unauthorized actions within the Administrative Console. Source-grounded technical framing indicates a need for defenders to focus on compensating controls and exposure verification.

Defensive priority

Defenders should prioritize verifying exposure in their inventory and assessing the feasibility of remote exploitation.

Recommended defensive actions

• Verify exposure in inventory
• Assess feasibility of remote exploitation
• Implement compensating controls for Administrative Console
• Review vendor patch guidance
• Track exceptions and retest remediated assets
• Check relevant monitoring, detection, and logs
• Plan vendor-supported updates or mitigations

Evidence notes

The vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. The exploit has been made public and could be used. Defenders should verify the affected deployments in their inventory and assess the feasibility of remote exploitation. Evidence limits are based on public sources and may not reflect the full scope or technical details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.