CVE-2026-76157
Received Received - Intake

Missing Authentication in Datiphy Data Management Center Allows Arbitrary File Upload

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: ZUSO Advanced Research Team (ZUSO ART)

Description
Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-76157
EUVD
EUVD-2026-63792

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
datiphy data_management_center From 8.3.0 (inc) to 8.5.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

Detection Guidance

Check if the Datiphy Data Management Center upload API endpoint is accessible without authentication. Test by sending a file upload request to the endpoint and verify if it succeeds without requiring credentials.

Impact Analysis

An attacker could exploit this to upload malicious files, potentially leading to remote code execution, data theft, or system compromise. The high CVSS score indicates severe impact on confidentiality and integrity.

Compliance Impact

This vulnerability could lead to unauthorized data access or exfiltration, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information.

Mitigation Strategies

Immediately update Datiphy Data Management Center to a version beyond v8.5.1 where the vulnerability is fixed. If an update is not available, restrict network access to the upload API endpoint and implement authentication requirements.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76157. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart