VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Oct 1, 2026

CVE-2026-55083

CVE-2026-55083

Description

DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution (RCE) via unsafe Java deserialization. This issue has been patched in versions 2.42.5.1, 2.43.0.1, and 2.44.

Affected products

1
  • dhis2/DHIS2llm-fuzzy
    Range: 2.42.0 to <2.42.5.1, 2.43.0 to <2.43.0.1

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.