VULNERABILITY INTELLIGENCE
CVE-2026-76158
EPSS probability0.52%
CISA KEVNot currently listed
Published2026-08-21
Last modified2026-10-18
Description
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.
Weakness classification
- ART@zuso.ai: CWE-73