CVE-2026-76155: CWE-1392 Use of default credentials in Datiphy Inc. Data Management Center
Description
CVE-2026-76155 is a critical vulnerability in Datiphy Inc.'s Data Management Center versions 8.3.0 through 8.5.1. It involves the use of default administrator credentials, allowing a remote attacker to gain administrative access without authentication. This vulnerability has a high CVSS 4.0 score of 9.3, indicating severe impact. No patch or vendor advisory information is provided regarding remediation. The product is not a cloud service, so remediation depends on vendor or user action.
CVSS v4.0
Score 9.3critical
Affected software
Datiphy Inc.
Data Management Center
pkg:github/datiphy/datamanagementcenterRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability identified as CVE-2026-76155 affects Datiphy Inc.'s Data Management Center from version 8.3.0 through 8.5.1. It is classified under CWE-1392, which concerns the use of default credentials. An attacker can remotely log in to the management platform using default administrator credentials, gaining full administrative access. This vulnerability does not require user interaction or privileges and has a network attack vector with low complexity. The CVSS 4.0 vector indicates high impact on confidentiality, integrity, and availability.
Potential Impact
Successful exploitation allows an unauthenticated remote attacker to gain administrative privileges on the affected Data Management Center platform. This can lead to full control over the management system, potentially compromising all managed data and operations. The vulnerability poses a critical risk to confidentiality, integrity, and availability of the system.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should change default administrator credentials immediately to strong, unique passwords to prevent unauthorized access. Monitor for any vendor updates regarding patches or official mitigations.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- ZUSO ART
- Date Reserved
- 2026-08-19T08:03:53.871Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a87b2f1acd9273b4974df0a
Added to database: 08/21/2026, 02:07:45 UTC
Last enriched: 09/10/2026, 19:20:41 UTC
Last updated: 10/04/2026, 18:55:08 UTC
Views: 146
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.