TI-2026-58972 CVE-2026-86183 · GHSA-px86-mrrq-wxm3
diem-project diem dmWidget BasedmWidgetActions.class.php authorization
Priority HIGH 70
A vulnerability was identified in diem-project diem up to 5.1.3.
diem-project
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
diem-project records in CISA KEVNo diem-project vulnerabilities are listed in CISA KEV.
Records
13 records
TI-2026-76225 CVE-2026-112040 · GHSA-2fp3-3pqm-j39r
Open redirect in diem-project diem Sign-In via Referer argument
Priority MEDIUM 63
A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
TI-2026-76226 CVE-2026-112041 · GHSA-4wx9-wcq2-pggj
Weak random number generator in diem-project diem dmString.php
Priority MEDIUM 61
A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
TI-2026-76222 CVE-2026-112037 · GHSA-mrh6-j8gm-g89v
Improper certificate validation in diem Google Analytics Client
Priority MEDIUM 61
A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
TI-2026-76213 CVE-2026-112030 · GHSA-6x47-r2q8-43f5
Use of default password in diem-project diem
Priority MEDIUM 57
A vulnerability was found in diem-project diem up to 5.1.3.
TI-2026-58971 CVE-2026-86182 · GHSA-pgc8-x3xq-85cm
diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery
Priority MEDIUM 57
A vulnerability was determined in diem-project diem up to 5.1.3.
TI-2026-57013 CVE-2026-82679 · GHSA-g23j-pp4q-43hx
diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload
Priority MEDIUM 57
A security flaw has been discovered in diem-project diem up to 5.1.3.
TI-2026-76382 CVE-2026-112138 · GHSA-46mr-p5vj-rv3q
Path traversal in diem-project diem dmCodeEditor module
Priority MEDIUM 56
A flaw has been found in diem-project diem up to 5.1.3.
TI-2026-76230 CVE-2026-112042 · GHSA-xxg5-2m9v-674j
Cross-site scripting in diem dmWidget dmBaseLinkTag text function
Priority MEDIUM 56
A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
TI-2026-57012 CVE-2026-82678 · GHSA-vwww-f8pq-w55x
diem-project diem Administrative Console actions.class.php executeCommand os command injection
Priority MEDIUM 56
A vulnerability was identified in diem-project diem up to 5.1.3.
TI-2026-76224 CVE-2026-112039 · GHSA-4g4g-ph7c-qhh4
Cross-site scripting in diem Administrative Console via dm_command
Priority MEDIUM 55
A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
TI-2026-76223 CVE-2026-112038 · GHSA-f334-cccv-q38h
Cross-site scripting in diem-project diem Version Check Service
Priority MEDIUM 55
A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
TI-2026-76210 CVE-2026-112029 · GHSA-83h9-vcq9-fvwv
Weak SHA1 password hashing in diem-project diem user model
Priority MEDIUM 44
A vulnerability has been found in diem-project diem up to 5.1.3.