critical9.3
CVE-2026-76158
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write…
Impact
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.
Affected products
| Product | Affected versions |
|---|---|
| Datiphy Data Management Center From V8.3.0 | through 8.5.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.