Skip to content
OopenDCIM
Products
| Product | CVEs | Exploited | Latest |
|---|
| openDCIM | 4 | – | Feb 27, 2026 |
Exploited and recent CVEs
-
CVE-2026-28517
Critical 9.3
openDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
6.3%
-
CVE-2026-28516
Critical 9.3
openDCIM <= 23.04 SQL Injection in Config::UpdateParameter
1.1%
-
CVE-2026-28515
Critical 9.3
openDCIM <= 23.04 Missing Authorization in install.php
1.3%
-
CVE-2025-48701
Medium 5.4
openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.
0.2%