openDCIM has 3 CVEs on record. The busiest recent month was February 2026 with 3. The median CVSS is 9.3 (critical), with 3 rated critical.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
openDCIM vulnerabilities
CVEs affecting openDCIM, newest first. Open any entry for full detail, references, and exploit status.
3 CVEsRSS
CVE-2026-28516Critical· 9.3PoCopenDCIM <= 23.04 SQL Injection in Config::UpdateParameter
openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string int…
CVE-2026-28515Critical· 9.3PoCopenDCIM <= 23.04 Missing Authorization in install.php
openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing applica…
CVE-2026-28517Critical· 9.3PoCopenDCIM <= 23.04 OS Command Injection via dot Configuration Parameter
openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() wit…