CVE-2026-76156

Datiphy Data Management Center - Improper Neutralization of Special Elements used in an OS Command PUBLISHED

Description (CNA)

OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root.

Affected (CNA)

Vendor / product	Versions
Datiphy Inc. / Data Management Center	affected v8.3.0 through v8.5.1

CWE

CWE-78

References

https://zuso.ai/advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.