CVE-2026-76157highCWE-306

CVE-2026-76157: high-severity vulnerability in Datiphy Inc. Data Management Center

Datiphy Data Management Center - Missing Authentication for Critical Function

Published

Follow this CVE+ Monitor Data Management Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.7%
Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
Datiphy Inc. · Data Management Center
Related CVEs — Datiphy Inc. Data Management Center

In the same product, most dangerous first.

CVE-2026-76156CRITICALDatiphy Data Management Center - Improper Neutralization of Special Elements used in an OS CommandEPSS 1.1%CVE-2026-76158CRITICALDatiphy Data Management Center - External Control of File Name or PathEPSS 0.5%CVE-2026-76155CRITICALDatiphy Data Management Center - Use of Default CredentialsEPSS 0.5%