CVE-2026-112040 | diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad Sign-In BasedmUserActions.class.php Referer redirect (Issue 457)

October 18, 2026 Yanac

A vulnerability was found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. It has been rated as problematic. This affects an unknown part of the file dmCorePlugin/plugins/dmUserPlugin/modules/dmUser/lib/BasedmUserActions.class.php of the component Sign-In. This manipulation of the argument Referer causes open redirect.

This vulnerability is tracked as CVE-2026-112040. The attack is possible to be carried out remotely. Moreover, an exploit is present.

This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More