CVE-2026-28516

openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter. The install.php and container-install.php handlers pass user-supplied input directly into SQL statements using string interpolation without prepared statements or proper input sanitation. An authenticated user can execute arbitrary SQL statements against the underlying database.

• CWE-89

• https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/Exploit, Third Party Advisory
• https://github.com/Chocapikk/opendcim-exploitExploit
• https://github.com/opendcim/openDCIM/blob/4467e9c4/config.inc.php#L75-L90Product
• https://github.com/opendcim/openDCIM/blob/4467e9c4/install.php#L420-L434Product
• https://github.com/opendcim/openDCIM/pull/1664Issue Tracking, Patch
• https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09Issue Tracking, Patch
• https://www.vulncheck.com/advisories/opendcim-sql-injection-in-config-updateparameterThird Party Advisory

Published

Feb 27, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-28510eLabFTW is an open source electronic lab notebook. In elabft…5.9
• CVE-2026-28511eLabFTW is an open source electronic lab notebook. Prior to …4.3
• CVE-2026-28512Pocket ID is an OIDC provider that allows users to authentic…6.1
• CVE-2026-28513Pocket ID is an OIDC provider that allows users to authentic…7.1
• CVE-2026-28514Rocket.Chat is an open-source, secure, fully customizable co…9.8
• CVE-2026-28515openDCIM version 23.04, through commit 4467e9c4, contains a …8.8
• CVE-2026-28517openDCIM version 23.04, through commit 4467e9c4, contains an…9.8
• CVE-2026-28518OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76…8.4
• CVE-2026-28519arduino-TuyaOpen before version 1.2.1 contains a heap-based …8.8
• CVE-2026-2852A vulnerability was identified in yeqifu warehouse up to aaf…6.3
• CVE-2026-28520arduino-TuyaOpen before version 1.2.1 contains a single-byte…8.6
• CVE-2026-28521arduino-TuyaOpen before version 1.2.1 contains an out-of-bou…7.7