PatchTheCVEopendcim vulnerabilities
Recent CVEs affecting opendcim products. 3 tracked.
opendcim has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-02-27. Highest priority: CVE-2026-28517 (score 71/100).
- CVE-2026-28517 CRITICAL 9.8 DOWNGRADE openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_netw
- CVE-2026-28516 HIGH 8.8 DOWNGRADE openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParam
- CVE-2026-28515 HIGH 8.8 DOWNGRADE openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php
FAQ
How do I fix opendcim vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opendcim being exploited right now?
None of the tracked opendcim CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opendcim CVE should I patch first?
CVE-2026-28517 currently ranks highest (71/100): openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_netw.