The CVE-2026-76158 vulnerability is an External Control of File Name or Path issue in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1. This allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences. Organizations should be aware of the vulnerability's critical severity, with a CVSS score [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-08-21T02:16:27.260Z and has not been modified since then. CVE-2026-76157 is a critical vulnerability in Datiphy Data Management Center from v8.3.0 through v8.5.1. The vulnerability class is missing authentication for a critical function in the upload API endpoint, allowing unauthenticated remote attack [truncated]
The CVE-2026-76156 vulnerability is a critical OS command injection issue in the api endpoint of Datiphy Data Management Center versions from v8.3.0 through v8.5.1. An authenticated administrator can exploit this vulnerability to execute arbitrary operating system commands as root. This vulnerability has a CVSS score of 9.4 and is considered CRITICAL. Administrators and users of affected versions should b [truncated]
CVE-2026-76155 is a critical vulnerability in Datiphy Data Management Center versions 8.3.0 through 8.5.1, allowing remote attackers to gain administrative access using default credentials. The vulnerability has a CVSS score of 9.3, indicating critical severity. Organizations should prioritize patching or mitigating this vulnerability to prevent potential administrative access by remote attackers. The CVE [truncated]
