CVE-2026-86182 | diem-project diem up to 5.1.3 dmConsole actions.class.php executeCommand dm_command cross-site request forgery (Issue 449)

September 5, 2026 Yanac

A vulnerability was found in diem-project diem up to 5.1.3. It has been classified as problematic. This affects the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component dmConsole. This manipulation of the argument dm_command causes cross-site request forgery.

This vulnerability appears as CVE-2026-86182. The attack may be initiated remotely. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More