CVE Catalog
CVE-2026-76156
CriticalCVSS 9.4Summary
OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root.
Risk Assessment
An authenticated administrator can gain full control over the system, potentially leading to complete compromise of the data management platform and all data.
Recommendation
It is recommended to immediately update Datiphy Data Management Center to a version newer than 8.5.1 and restrict administrator privileges to the minimum necessary.
Original NVD description (English source)
OS command injection in the api endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an authenticated administrator to execute arbitrary operating system commands as root.