CVE-2026-84841 tsi-coop tsi-dpdp-cms client-side enforcement of server-side security
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-84841?
CVE-2026-84841 is a medium-severity vulnerability in tsi-coop tsi-dpdp-cms, published on 2 Sep 2026.
Official description
A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.5.1 is able to resolve this issue. It is recommended to upgrade the affected component.
Weakness: CWE-602
Which versions are affected by CVE-2026-84841?
How do I fix CVE-2026-84841?
No fix has been published for CVE-2026-84841 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-84841 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-84841 exists.
Sources
Also known as GHSA-xvjh-cx5w-2fp2.