CVE-2026-112029 | diem-project diem up to 5.1.3 SHA1 PluginDmUser.class.php salt/password weak password hash (Issue 452)

October 18, 2026 Yanac

A vulnerability labeled as problematic has been found in diem-project diem up to 5.1.3. This affects an unknown part of the file lib/model/doctrine/PluginDmUser.class.php of the component SHA1 Handler. Such manipulation of the argument salt/password leads to password hash with insufficient computational effort.

This vulnerability is documented as CVE-2026-112029. The attack needs to be performed locally. Additionally, an exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More