CVE-2026-55083

Sažetak

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution (RCE) via unsafe Java deserialization. This issue has been patched in versions 2.42.5.1, 2.43.0.1, and 2.44.

Reference

https://github.com/dhis2/dhis2-core/releases/tag/2.42.5.1
https://github.com/dhis2/dhis2-core/releases/tag/2.43.0.1
https://github.com/dhis2/dhis2-core/security/advisories/GHSA-3fr2-wvqx-cmr5

CVSS

Base:	9.1
Impact:	6.0
Exploitability:	2.3

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	HIGH

Impact

Povjerljivost	Cjelovitost	Dostupnost
HIGH	HIGH	HIGH

CVSS vektor

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Zadnje važnije ažuriranje

02-10-2026 - 18:53

Objavljeno

01-10-2026 - 19:17