CVE-2026-76158 — Datiphy Data Management Center - External Control of File Name or Path

CVE-2026-76158

Datiphy Data Management Center - External Control of File Name or Path PUBLISHED

Description (CNA)

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.

Affected (CNA)

Vendor / product	Versions
Datiphy Inc. / Data Management Center	affected v8.3.0 through v8.5.1

CWE

CWE-73

References

https://zuso.ai/advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.