CVE-2026-112038 | diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad Version Check Service dmAdminCtrl.js html cross site scripting (Issue 455)

October 18, 2026 Yanac

A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. It has been classified as problematic. Affected by this vulnerability is the function html of the file dmAdminPlugin/web/js/dmAdminCtrl.js of the component Version Check Service. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-112038. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More