OS Command Injection in Datiphy Data Management Center
CVE-2026-76156

9.4CRITICAL

Key Information:

Vendor

Datiphy Inc.

Status
Data Management Center
Vendor
CVE Published:
21 August 2026

What is CVE-2026-76156?

The vulnerability in the Datiphy Data Management Center allows an authenticated administrator to exploit the api endpoint and execute arbitrary operating system commands with root privileges. This could lead to severe security risks, including unauthorized access and control over the system, as well as potential data breaches. It is essential for users to update to the latest versions to mitigate this risk.

Affected Version(s)

Data Management Center v8.3.0

References

https://zuso.ai/advisory
third-party-advisory

CVSS V4

Score:
9.4
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.