Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Datiphy Inc. Clear all filters
TI-2026-53279 CVE-2026-76158 · GHSA-3g7v-7vpf-gwmm

Datiphy Data Management Center - External Control of File Name or Path

Priority MEDIUM 47

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload dir…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00521 Published 2026-08-21 No fix listed CWE-73
TI-2026-53278 CVE-2026-76157 · GHSA-fgmq-h6gh-p5x7

Datiphy Data Management Center - Missing Authentication for Critical Function

Priority MEDIUM 47

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's c…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00731 Published 2026-08-21 No fix listed CWE-306
TI-2026-53276 CVE-2026-76155 · GHSA-7q54-468c-p268

Datiphy Data Management Center - Use of Default Credentials

Priority MEDIUM 49

Use of default credentials in Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to gain administrative access to the management platform by logging in with default administrator credentia…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00494 Published 2026-08-21 No fix listed CWE-1392