Is CVE-2026-28515 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-28515 being exploited in the wild.

How severe is CVE-2026-28515?

High severity, with a CVSS score of 8.8, published 27 February 2026.

Which products and versions are affected?

Opendcim Through 23.04 (commit 4467e9c4).

Is there a fix for CVE-2026-28515?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-28515 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-28515?

Check whether you run Opendcim at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-28515: openDCIM missing authorization in install.php

CVE-2026-28515 · Severity: high · CVSS 8.8 · Published 2026-02-27

openDCIM, an open-source tool for managing data center infrastructure, contains a security flaw in its installation and upgrade components. The software fails to verify if a user has administrative rights before allowing them to modify sensitive LDAP configuration settings. This could allow any logged-in user to change system settings, potentially leading to a full takeover of the application and its data.

Technologies: Opendcim. Vendors: Opendcim.

Quick answers

Is CVE-2026-28515 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-28515 being exploited in the wild.
How severe is CVE-2026-28515?: High severity, with a CVSS score of 8.8, published 27 February 2026.
Which products and versions are affected?: Opendcim Through 23.04 (commit 4467e9c4).
Is there a fix for CVE-2026-28515?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-28515 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-28515?: Check whether you run Opendcim at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A missing authorization vulnerability (CWE-862) exists in openDCIM's 'install.php' and 'container-install.php' scripts. While the application uses a role-based access control system, these specific scripts—which handle installation and upgrades—fail to enforce 'SiteAdmin' role checks. Consequently, any authenticated user can access and modify LDAP configuration parameters. In specific environments, such as certain Docker deployments where the 'REMOTE_USER' environment variable is statically set without actual authentication enforcement, this endpoint may be accessible to unauthenticated remote attackers. This vulnerability serves as a primary entry point for a multi-stage exploit chain involving SQL injection and remote code execution.

Affected products

openDCIM openDCIM Through 23.04 (commit 4467e9c4)

Timeline

2026-02-26: disclosed: Initial researcher blog post published
2026-02-27: advisory: CVE-2026-28515 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.