Digi: CVE Program partner

CVEs, 365 days45 all time, 0 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Digi International Inc.
Role	CNA
Type	Vendor
Reports to	icscert → CISA
Scope	Digi branded products and services only.
Advisories	https://www.digi.com/resources/security

CVE-2026-75937 2026-10-02 · CVSS 9.4
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with
CVE-2026-12948 2026-07-07 · CVSS 4.8
A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows
CVE-2026-12352 2026-07-07 · CVSS 5.9
This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.
CVE-2025-13319 2025-11-17 · CVSS 8.8
An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted
CVE-2025-3659 2025-05-12 · CVSS 9.4
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - prior to an

Digi