CVE-2026-28516

CRITICAL EPSS 57.5%
Published Feb 27, 20264mo ago · Modified Mar 10, 20263mo ago
9.3 CVSS 4.0
Critical
Find Similar
Published Feb 27, 2026 4mo ago
Last Modified Mar 10, 2026 3mo ago

Description

openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitation. An authenticated user can execute arbitrary SQL statements against the underlying database.

CVSS Details

Base Score
9.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
57.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

VendorProductVersionRange
opendcimopendcim23.04any

References 7

  • chocapikk.com https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/
    ExploitThird Party Advisory
  • github.com https://github.com/Chocapikk/opendcim-exploit
    Exploit
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/config.inc.php#L75-L90
    Product
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L420-L434
    Product
  • github.com https://github.com/opendcim/openDCIM/pull/1664
    Issue TrackingPatch
  • github.com https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09
    Issue TrackingPatch
  • vulncheck.com https://www.vulncheck.com/advisories/opendcim-sql-injection-in-config-updateparameter
    Third Party Advisory

Remediation

  • github.com https://github.com/opendcim/openDCIM/pull/1664
    Issue TrackingPatch
  • github.com https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09
    Issue TrackingPatch