CVE-2026-55083

9.1 Critique

Publiée le 01/10/2026 à 21:17 · Modifiée le 02/10/2026 à 20:53 · En attente d'analyse NVD · Source : security-advisories@github.com

Description

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution (RCE) via unsafe Java deserialization. This issue has been patched in versions 2.42.5.1, 2.43.0.1, and 2.44.

Traduire en français

Produits concernés

dhis2-core

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.1 Critique	security-advisories@github.com	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-502

Références

https://github.com/dhis2/dhis2-core/releases/tag/2.42.5.1
https://github.com/dhis2/dhis2-core/releases/tag/2.43.0.1
https://github.com/dhis2/dhis2-core/security/advisories/GHSA-3fr2-wvqx-cmr5

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories