CVE-2026-112041 | CVSS: 3.7 | 严重级别: LOW
A vulnerability was identified in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad. This vulnerability affects the function dmString::random of the file dmCorePlugin/lib/basic/dmString.php. Such manipulation leads to cryptographically weak prng. The attack may be performed from remote. A high complexity level is associated with this attack. It is stated that the exploitability is difficult. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases
参考链接:
• https://github.com/diem-project/diem/
• https://github.com/diem-project/diem/issues/458
• https://vuldb.com/cve/CVE-2026-112041
📌 数据来源: NVD 官方