CVE-2026-112030 PUBLISHED

diem-project diem dmDataLoad.php default password

Assigner: VulDB
Reserved: 18.10.2026 Published: 18.10.2026 Updated: 18.10.2026

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is suggested to update the configuration settings. The project was informed of the problem early through an issue report but has not responded yet.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.3

Product Status

Vendor diem-project
Product diem
Versions
  • Version 5.1.0 is affected
  • Version 5.1.1 is affected
  • Version 5.1.2 is affected
  • Version 5.1.3 is affected

Credits

  • gscsd (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Use of Default Password CWE