---
id: CVE-2026-112030
title: diem-project diem dmDataLoad.php default password
summary: >-
  A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability
  affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php.
  Performing a manipulation results in use of default password. The attack is
  possible to…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:W/RC:C'
cvssSource: cna
cwe:
  - CWE-1393
vendor: diem-project
product: diem
affected:
  - diem 5.1.0
  - diem 5.1.1
  - diem 5.1.2
  - diem 5.1.3
published: '2026-10-18'
updated: '2026-10-18'
sourceUpdated: '2026-10-18T23:15:19.936Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-112030'
references:
  - url: 'https://vuldb.com/vuln/421678'
    label: VDB-421678 | diem-project diem dmDataLoad.php default password
  - url: 'https://vuldb.com/vuln/421678/cti'
    label: 'VDB-421678 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-112030'
    label: CVE-2026-112030 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1008078'
    label: >-
      Submit #1008078 | diem-project diem
      116974edfb9a5b8bd69cb13586dc62bcdbb485ad Use of Default Password
  - url: 'https://github.com/diem-project/diem/issues/453'
  - url: 'https://github.com/diem-project/diem/'
tags:
  - cve.org
ingestedAt: '2026-10-18T23:53:02.548Z'
---

## Overview

A vulnerability was found in diem-project diem up to 5.1.3. This vulnerability affects unknown code of the file dmCorePlugin/lib/data/dmDataLoad.php. Performing a manipulation results in use of default password. The attack is possible to be carried out remotely. The exploit has been made public and could be used. It is suggested to update the configuration settings. The project was informed of the problem early through an issue report but has not responded yet.

## Affected

- `diem 5.1.0`
- `diem 5.1.1`
- `diem 5.1.2`
- `diem 5.1.3`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.