CVE-2026-112030

Source
https://cve.org/CVERecord?id=CVE-2026-112030
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112030.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-112030
Published
2026-10-18T23:15:19Z
Modified
2026-10-19T10:45:20Z
Severity
  • 2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
diem-project diem dmDataLoad.php default password
Details

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is suggested to update the configuration settings. The project was informed of the problem early through an issue report but has not responded yet.

Database specific
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-1393"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112030.json"
}
References

Affected packages

Git / github.com/diem-project/diem

Affected ranges

Type
GIT
Repo
https://github.com/diem-project/diem
Events
Database specific
Show details
{
    "extracted_events":  [
        {
            "introduced":  "5.1.0"
        },
        {
            "last_affected":  "5.1.0"
        },
        {
            "introduced":  "5.1.1"
        },
        {
            "last_affected":  "5.1.1"
        },
        {
            "introduced":  "5.1.2"
        },
        {
            "last_affected":  "5.1.2"
        },
        {
            "introduced":  "5.1.3"
        },
        {
            "last_affected":  "5.1.3"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

5.*
5.1.0
5.1.0-ALPHA1
5.1.0-BETA1
5.1.0-BETA2
5.1.0-BETA3
5.1.0-DEV
5.1.0-RC1
5.1.0-RC2
5.1.1
5.1.2
5.1.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112030.json"