{"vulnerability": "cve-2026-76158", "sightings": [{"uuid": "c4107ddc-a58d-4463-bbb5-3c32cbad64da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76158", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117131262323183747", "content": "CVE-2026-76158: Datiphy Data Management Center 8.3.0 faces CRITICAL vuln (CVSS 9.3) \u2014 upload API allows unauthenticated file writes anywhere via path traversal \ud83d\uddc2\ufe0f. Restrict access & monitor uploads until patch. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-management-center-6c6f4960c6201d48 #OffSeq #Vuln #Datiphy #CVE202676158", "creation_timestamp": "2026-08-21T03:00:25.137508Z"}, {"uuid": "43466339-74c5-41b0-91b3-79d0762f7677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-76158", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtkrfdbwjx2w", "content": "CRITICAL: Datiphy Data Management Center 8.3.0 vulnerable (CVE-2026-76158). Unauthenticated attackers can write files anywhere via upload API. Restrict access & monitor uploads now. https://radar.offseq.com/threat/cve-2026-76158-cwe-73-external-control-of-file-name-or-path-in-datiphy-inc-data-man...", "creation_timestamp": "2026-08-21T03:00:27.505892Z"}, {"uuid": "59168aa5-c217-427e-a10e-6b6605f45901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtku63r6uh2u", "content": "CVE-2026-76158 - data management center\nThe upload feature in Datiphy Data Management Center versions 8.3.0 through 8.5.1 can be tricked into writing files to locations you didn't intend. This could let a remote\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#datiphy #CVE #infosec", "creation_timestamp": "2026-08-21T03:50:05.223047Z"}, {"uuid": "d9cb51eb-648a-4c87-be89-ab8563f5e0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtkvb3a6zq2j", "content": "\ud83d\udea8 CVE-2026-76158 \u2014 CVSS 9.3 CRITICAL\n\nExternal Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-76158\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-21T04:09:38.675547Z"}, {"uuid": "2d6e254c-591a-4802-9e74-21696c4121a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-76158", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4gox73pk2mqpr", "content": "CVE-2026-76158 - Datiphy Data Management Center - External Control of File Name or Path\nCVE ID : CVE-2026-76158\n \n Published : Aug. 21, 2026, 3:16 a.m. | 39\u00a0minutes ago\n \n Description : External Control of File Name or Path in the upload API endpoint of Datiphy Data Management...", "creation_timestamp": "2026-08-21T04:07:24.771008Z"}]}