CVE-2026-28517

CRITICAL EPSS 92.0%
Published Feb 27, 20264mo ago · Modified May 12, 20261mo ago
9.3 CVSS 4.0
Critical
Find Similar
Published Feb 27, 2026 4mo ago
Last Modified May 12, 2026 1mo ago

Description

openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or sanitization. If an attacker can modify the fac_Config.dot value, arbitrary commands may be executed in the context of the web server process.

CVSS Details

Base Score
9.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
92.0% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-78 OS Command Injection Injection

Affected Products 1

VendorProductVersionRange
opendcimopendcim23.04any

References 7

  • chocapikk.com https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/
    ExploitThird Party Advisory
  • github.com https://github.com/Chocapikk/opendcim-exploit
    Exploit
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/report_network_map.php#L467
    Product
  • github.com https://github.com/opendcim/openDCIM/blob/4467e9c4/report_network_map.php#L7
    Product
  • github.com https://github.com/opendcim/openDCIM/pull/1664
    Issue TrackingPatch
  • github.com https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09
    Issue TrackingPatch
  • vulncheck.com https://www.vulncheck.com/advisories/opendcim-os-command-injection-via-dot-configuration-parameter
    Third Party Advisory

Remediation

  • github.com https://github.com/opendcim/openDCIM/pull/1664
    Issue TrackingPatch
  • github.com https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09
    Issue TrackingPatch