DA
Vendor
DataLinkDC
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-70559 | DI Dinky DataLinkDC | 7.5 | Aug 6 | Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll |
| CVE-2026-70558 | DI Dinky DataLinkDC | 9.8 | Aug 6 | Dinky Unauthenticated Arbitrary File Write via /download/uploadFromRsByLocal Gated Only by Hardcoded Default Token |
| CVE-2026-3053 | DI dinky DataLinkDC | 9.8 | Feb 24 | DataLinkDC dinky OpenAPI Endpoint AppConfig.java addInterceptors missing authentication |
| CVE-2026-3052 | DI dinky DataLinkDC | 7.7 | Feb 24 | DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery |
| CVE-2026-3051 | DI dinky DataLinkDC | 7.6 | Feb 24 | DataLinkDC dinky Project Name GitRepository.java getProjectDir path traversal |
