CVE-2026-112037 | CVSS: 3.7 | 严重级别: LOW
A flaw has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. Affected is an unknown function of the file dmCorePlugin/lib/vendor/gapi/gapi.class.php of the component Google Analytics Client. Executing a manipulation can lead to improper certificate validation. The attack may be launched remotely. The attack requires a high level of complexity. The exploitability is told to be difficult. The exploit has been published and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for eithe
参考链接:
• https://github.com/diem-project/diem/
• https://github.com/diem-project/diem/issues/454
• https://vuldb.com/cve/CVE-2026-112037
📌 数据来源: NVD 官方