Login Request a demo
DI
Product
diem
by diem-project · last CVE Oct 19, 2026
13
CVEs
0
On KEV
6.3
Max CVSS
9
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 0High 0Medium 7Low 6
Severity
All severities13Critical0High0Medium7Low6
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add diem to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-112030
6.3
0%
Oct 18
diem-project diem dmDataLoad.php default password
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-82679
6.3
0%
Aug 31
diem-project diem Widget Editor dmWidgetContentBaseMediaForm.php unrestricted upload
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-86183
5.3
1%
Sep 6
diem-project diem dmWidget BasedmWidgetActions.class.php authorization
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-112138
4.7
0%
Oct 19
diem-project diem dmCodeEditor actions.class.php join path traversal
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-82678
4.7
2%
Aug 31
diem-project diem Administrative Console actions.class.php executeCommand os command injection
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-112040
4.3
0%
Oct 19
diem-project diem Sign-In BasedmUserActions.class.php redirect
Affected: 116974edfb9a5b8bd69cb13586dc62bcdbb485ad
CVE-2026-86182
4.3
0%
Sep 6
diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-112041
3.7
0%
Oct 19
diem-project diem dmString.php random weak prng
Affected: 116974edfb9a5b8bd69cb13586dc62bcdbb485ad
CVE-2026-112037
3.7
0%
Oct 19
diem-project diem Google Analytics Client gapi.class.php certificate validation
Affected: 116974edfb9a5b8bd69cb13586dc62bcdbb485ad
CVE-2026-112042
3.5
0%
Oct 19
diem-project diem dmWidget dmBaseLinkTag.php text cross site scripting
Affected: 116974edfb9a5b8bd69cb13586dc62bcdbb485ad
CVE-2026-112029
2.5
0%
Oct 18
diem-project diem SHA1 PluginDmUser.class.php weak password hash
Affected: 5.1.0; 5.1.1; 5.1.2; 5.1.3
CVE-2026-112039
2.4
0%
Oct 19
diem-project diem Administrative Console actions.class.php append cross site scripting
Affected: 116974edfb9a5b8bd69cb13586dc62bcdbb485ad
CVE-2026-112038
2.4
0%
Oct 19
diem-project diem Version Check Service dmAdminCtrl.js html cross site scripting
Affected: 116974edfb9a5b8bd69cb13586dc62bcdbb485ad
Showing 13