CVE-2026-55083
DHIS2 is a flexible information system for data capture, management, validation, analytics and…
- Risk score
- 64/100
- CVSS
- 9.1 v3.1
- Exploit chance (30 days)
- 0.6%
- Published
- 1 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution (RCE) via unsafe Java deserialization. This issue has been patched in versions…
- Affected
- See advisory
- Fix
- Upgrade the product to 2.42.5.1, 2.43.0.1 or 2.44 (whichever matches your release line), or later.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 9.1 critical
References
Original description
DHIS2 is a flexible information system for data capture, management, validation, analytics and visualization. From versions 2.42.0 to before 2.42.5.1, and from versions 2.43.0 to before 2.43.0.1, DHIS2 is vulnerable to remote code execution (RCE) via unsafe Java deserialization. This issue has been patched in versions 2.42.5.1, 2.43.0.1, and 2.44.
Last activity 1 Oct 2026. Patch Forecast updates every hour.