What is GHSA-fgmq-h6gh-p5x7?

GHSA-fgmq-h6gh-p5x7 is a security advisory published by GitHub Security Advisories with High severity. Missing authentication for a critical function in the upload API endpoint of Datiphy Data...

Which CVE IDs does GHSA-fgmq-h6gh-p5x7 cover?

GHSA-fgmq-h6gh-p5x7 covers the following CVE IDs: CVE-2026-76157. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-fgmq-h6gh-p5x7High

Missing authentication for a critical function in the upload API endpoint of Datiphy Data...

Vendor

GitHub Security Advisories

Published

August 21, 2026

Last Modified

August 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-76157 →

📋 Description

Missing authentication for a critical function in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows an unauthenticated remote attacker to upload arbitrary files to the server's configured upload directory.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-76157
https://zuso.ai/advisory
https://github.com/advisories/GHSA-fgmq-h6gh-p5x7