https://vulnogram.org/ Most recent CVEs assigned by Digi International Inc. (digi). https://vulnogram.org/seaview/icons/digi.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-75937 https://vulnogram.org/CVE-2026-75937 A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the d… Critical Fri, 02 Oct 2026 20:33:56 GMT https://vulnogram.org/CVE-2026-12948 https://vulnogram.org/CVE-2026-12948 A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration… Medium Tue, 07 Jul 2026 14:32:43 GMT https://vulnogram.org/CVE-2026-12352 https://vulnogram.org/CVE-2026-12352 This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device. Medium Network Exploitable Tue, 07 Jul 2026 14:31:08 GMT https://vulnogram.org/CVE-2025-13319 https://vulnogram.org/CVE-2025-13319 An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API is not enabled by default, and a valid API token is required to perform the… High Mon, 17 Nov 2025 16:37:40 GMT https://vulnogram.org/CVE-2025-3659 https://vulnogram.org/CVE-2025-3659 Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022 * Digi One SP/Digi One SP IA/Digi One IA - prior… Critical Mon, 12 May 2025 20:40:03 GMT