Is CVE-2026-76158 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-76158

Description

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences.