CVE-2026-28515

CRITICAL EPSS 63.1%
Published Feb 27, 20264mo ago · Modified Mar 10, 20263mo ago
9.3 CVSS 4.0
Critical
Find Similar
Published Feb 27, 2026 4mo ago
Last Modified Mar 10, 2026 3mo ago

Description

openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.

CVSS Details

Base Score
9.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
63.1% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-862 Missing Authorization Authorization

Affected Products 1

VendorProductVersionRange
opendcimopendcim23.04any

References 8

  • chocapikk.com https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/
    ExploitThird Party Advisory
  • github.com https://github.com/Chocapikk/opendcim-exploit
    Exploit
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/container-install.php#L421-L435
    Product
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L293
    Product
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L420-L434
    Product
  • github.com https://github.com/opendcim/openDCIM/pull/1664
    Issue TrackingPatch
  • github.com https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09
    Issue TrackingPatch
  • vulncheck.com https://www.vulncheck.com/advisories/opendcim-missing-authorization-in-install-php
    Third Party Advisory

Remediation

  • github.com https://github.com/opendcim/openDCIM/pull/1664
    Issue TrackingPatch
  • github.com https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09
    Issue TrackingPatch