CVE-2026-76157 — Datiphy Data Management Center - Missing Authentication for Critical Function

CVE-2026-76157

Datiphy Data Management Center - Missing Authentication for Critical Function PUBLISHED

Description (CNA)

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

Affected (CNA)

Vendor / product	Versions
Datiphy Inc. / Data Management Center	affected v8.3.0 through v8.5.1

CWE

CWE-306

References

https://zuso.ai/advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.