Vulnerability · Published Aug 21, 2026 · Assigned by ZUSO ART
CVE-2026-76157Datiphy Data Management Center - Missing Authentication for Critical Function
High 8.8
In plain English
A high-severity missing authentication in Data Management Center from Datiphy Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).
Severity (CVSS 4.0)8.8High
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Datiphy Inc. | Data Management Center | v8.3.0 – through v8.5.1 |
Weakness: CWE-306 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://zuso.ai/advisory third-party-advisory