CVE-2026-76158 — Datiphy Data Management Center - External Control of File Name or Path
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrar…
Published: 2026-08-21 · CVSS: 9.3 · CVSS 4.0
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7