CVE-2026-55081 | DHIS2 up to 2.42.5.0/2.43.0.0 OpenAPI HTML endpoint Scope HTML injection

July 21, 2026 Yanac

A vulnerability was found in DHIS2 up to 2.42.5.0/2.43.0.0. It has been rated as problematic. Affected is an unknown function of the component OpenAPI HTML endpoint. The manipulation of the argument Scope leads to HTML injection.

This vulnerability is uniquely identified as CVE-2026-55081. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More