CVE-2026-28515

openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php. The installer and upgrade handler expose LDAP configuration functionality without enforcing application role checks. Any authenticated user can access this functionality regardless of assigned privileges. In deployments where REMOTE_USER is set without authentication enforcement, the endpoint may be accessible without credentials. This allows unauthorized modification of application configuration.

• CWE-862

• https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/Exploit, Third Party Advisory
• https://github.com/Chocapikk/opendcim-exploitExploit
• https://github.com/opendcim/openDCIM/blob/4467e9c4/container-install.php#L421-L435Product
• https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L293Product
• https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L420-L434Product
• https://github.com/opendcim/openDCIM/pull/1664Issue Tracking, Patch
• https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09Issue Tracking, Patch
• https://www.vulncheck.com/advisories/opendcim-missing-authorization-in-install-phpThird Party Advisory

Published

Feb 27, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2851A vulnerability was determined in yeqifu warehouse up to aaf…5.3
• CVE-2026-28510eLabFTW is an open source electronic lab notebook. In elabft…5.9
• CVE-2026-28511eLabFTW is an open source electronic lab notebook. Prior to …4.3
• CVE-2026-28512Pocket ID is an OIDC provider that allows users to authentic…6.1
• CVE-2026-28513Pocket ID is an OIDC provider that allows users to authentic…7.1
• CVE-2026-28514Rocket.Chat is an open-source, secure, fully customizable co…9.8
• CVE-2026-28516openDCIM version 23.04, through commit 4467e9c4, contains a …8.8
• CVE-2026-28517openDCIM version 23.04, through commit 4467e9c4, contains an…9.8
• CVE-2026-28518OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76…8.4
• CVE-2026-28519arduino-TuyaOpen before version 1.2.1 contains a heap-based …8.8
• CVE-2026-2852A vulnerability was identified in yeqifu warehouse up to aaf…6.3
• CVE-2026-28520arduino-TuyaOpen before version 1.2.1 contains a single-byte…8.6