CVE-2026-84841 tsi-coop tsi-dpdp-cms client-side enforcement of server-side security

Medium 6.9 Published Updated
Exploited in the wild
Not known
Fix
None listed

What is CVE-2026-84841?

CVE-2026-84841 is a medium-severity vulnerability in tsi-coop tsi-dpdp-cms, published on 2 Sep 2026.

Official description

A security flaw has been discovered in tsi-coop tsi-dpdp-cms up to 0.5.0. This vulnerability affects unknown code. The manipulation results in client-side enforcement of server-side security. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. Upgrading to version 0.5.1 is able to resolve this issue. It is recommended to upgrade the affected component.

Weakness: CWE-602

Which versions are affected by CVE-2026-84841?

How do I fix CVE-2026-84841?

No fix has been published for CVE-2026-84841 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-84841 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-84841 exists.

Sources

Also known as GHSA-xvjh-cx5w-2fp2.

Is CVE-2026-84841 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free