What’s Vulnerable › Products

diem-project diem vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your diem-project diem version is affected

Latest diem-project diem vulnerabilities

• CVE-2026-112138 — diem-project diem dmCodeEditor actions.class.php join path traversal (CVSS 4.7)
• CVE-2026-112042 — diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting (CVSS 3.5)
• CVE-2026-112041 — diem-project diem dmString.php random weak prng (CVSS 3.7)
• CVE-2026-112040 — diem-project diem Sign-In BasedmUserActions.class.php redirect (CVSS 4.3)
• CVE-2026-112039 — diem-project diem Administrative Console actions.class.php append cross site scripting (CVSS 2.4)
• CVE-2026-112038 — diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting (CVSS 2.4)
• CVE-2026-112037 — diem-project diem Google Analytics Client gapi.class.php certificate validation (CVSS 3.7)
• CVE-2026-112030 — diem-project diem dmDataLoad.php default password (CVSS 6.3)
• CVE-2026-112029 — diem-project diem SHA1 PluginDmUser.class.php weak password hash (CVSS 2.5)
• CVE-2026-86183 — diem-project diem dmWidget BasedmWidgetActions.class.php authorization (CVSS 5.3)
• CVE-2026-86182 — diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery (CVSS 4.3)
• CVE-2026-82679 — diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload (CVSS 6.3)
• CVE-2026-82678 — diem-project diem Administrative Console actions.class.php executeCommand os command injection (CVSS 4.7)