Vulnerability in Datiphy Inc. Data Management Center
CVE-2026-76158
External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.
Affected products
Weakness classification (CWE)
References
- ART@zuso.ai (third-party-advisory)