CVE-2026-28517

openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or sanitization. If an attacker can modify the fac_Config.dot value, arbitrary commands may be executed in the context of the web server process.

• CWE-78

• https://chocapikk.com/posts/2026/opendcim-sqli-to-rce/Exploit, Third Party Advisory
• https://github.com/Chocapikk/opendcim-exploitExploit
• https://github.com/opendcim/openDCIM/blob/4467e9c4/report_network_map.php#L467Product
• https://github.com/opendcim/openDCIM/blob/4467e9c4/report_network_map.php#L7Product
• https://github.com/opendcim/openDCIM/pull/1664Issue Tracking, Patch
• https://github.com/opendcim/openDCIM/pull/1664/changes/8f7ab2a710086a9c8c269560793e47c577ddda09Issue Tracking, Patch
• https://www.vulncheck.com/advisories/opendcim-os-command-injection-via-dot-configuration-parameterThird Party Advisory

Published

Feb 27, 2026

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-28511eLabFTW is an open source electronic lab notebook. Prior to …4.3
• CVE-2026-28512Pocket ID is an OIDC provider that allows users to authentic…6.1
• CVE-2026-28513Pocket ID is an OIDC provider that allows users to authentic…7.1
• CVE-2026-28514Rocket.Chat is an open-source, secure, fully customizable co…9.8
• CVE-2026-28515openDCIM version 23.04, through commit 4467e9c4, contains a …8.8
• CVE-2026-28516openDCIM version 23.04, through commit 4467e9c4, contains a …8.8
• CVE-2026-28518OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76…8.4
• CVE-2026-28519arduino-TuyaOpen before version 1.2.1 contains a heap-based …8.8
• CVE-2026-2852A vulnerability was identified in yeqifu warehouse up to aaf…6.3
• CVE-2026-28520arduino-TuyaOpen before version 1.2.1 contains a single-byte…8.6
• CVE-2026-28521arduino-TuyaOpen before version 1.2.1 contains an out-of-bou…7.7
• CVE-2026-28522arduino-TuyaOpen before version 1.2.1 contains a null pointe…7.1