CVE-2026-76157CWE-306

CVE-2026-76157

published August 21, 2026

CVSS

8.8

EPSS

Percentile

53.8

In the wild

Unconfirmed

What it is

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

The record

Technical detail

CVSS: 8.8 · NONE
CVSS v4.0: 8.8 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS: 0.00731 · 53.8th percentile
Weakness: CWE-306 · Missing Authentication for Critical Function
Published: 2026-08-21T06:16Z

References (1)

https://zuso.ai/advisory · [email protected]

EPSS history

Timeline

21 AUG 01:47Z
Datiphy Data Management Center - Missing Authentication for Critical Function
cvelistv5