diem-project has 11 CVEs on record. Disclosure cadence is accelerating: 11 in the last 90 days against 0 in the 90 before. The busiest recent month was October 2026 with 9. The median CVSS is 3.7 (low). None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (3) and CWE-94 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 3.7
- Publish → KEV
- —
- Last 90 days
- 11 prev 0
Weakness classes
Products
- diem 11
Worst active — by depth score
CVE-2026-112030Medium· 6.3diem-project diem dmDataLoad.php default password47CVE-2026-86183Medium· 5.3A vulnerability was identified in diem-project diem up to 5.1.341CVE-2026-112138Medium· 4.7diem-project diem dmCodeEditor actions.class.php join path traversal38CVE-2026-112040Medium· 4.3diem-project diem Sign-In BasedmUserActions.class.php redirect36CVE-2026-86182Medium· 4.3A vulnerability was determined in diem-project diem up to 5.1.336
diem-project vulnerabilities
CVEs affecting diem-project, newest first. Open any entry for full detail, references, and exploit status.
11 CVEsRSS
CVE-2026-112138Medium· 4.7PoCdiem-project diem dmCodeEditor actions.class.php join path traversal
A flaw has been found in diem-project diem up to 5.1.3. The impacted element is the function dmOs::join of the file dmFrontPlugin/modules/dmCodeEditor/actions/actions.class.php of the component dmCodeEditor. Executing a manipulation can …
CVE-2026-112042Low· 3.5PoCdiem-project diem dmWidget dmBaseLinkTag.php text cross site scripting
A security flaw has been discovered in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This issue affects the function dmBaseLinkTag::text of the file dmCorePlugin/lib/view/html/link/dmBaseLinkTag.php of the component d…
CVE-2026-112040Medium· 4.3PoCdiem-project diem Sign-In BasedmUserActions.class.php redirect
A vulnerability was determined in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the componen…
CVE-2026-112041Low· 3.7PoCdiem-project diem dmString.php random weak prng
A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryp…
CVE-2026-112037Low· 3.7PoCdiem-project diem Google Analytics Client gapi.class.php certificate validation
A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php of the component Google Analytics Client. Executing a mani…
CVE-2026-112038Low· 2.4PoCdiem-project diem Version Check Service dmAdminCtrl.js html cross site scripting
A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Servic…
CVE-2026-112039Low· 2.4PoCdiem-project diem Administrative Console actions.class.php append cross site scripting
A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected by this issue is the function append of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administr…
CVE-2026-112029Low· 2.5PoCdiem-project diem SHA1 PluginDmUser.class.php weak password hash
A vulnerability has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to p…
CVE-2026-112030Medium· 6.3PoCdiem-project diem dmDataLoad.php default password
A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to…
CVE-2026-86183Medium· 5.3PoCA vulnerability was identified in diem-project diem up to 5.1.3
A vulnerability was identified in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmFrontPlugin/modules/dmWidget/lib/BasedmWidgetActions.class.php of the component dmWidget. Such manipulation of the arg…
CVE-2026-86182Medium· 4.3PoCA vulnerability was determined in diem-project diem up to 5.1.3
A vulnerability was determined in diem-project diem up to 5.1.3. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument…