Veille CVE

Recherche « Digi International Digi One SP »

2 CVE

  1. CVE-2026-12948 4.8 Moyenne

    Digi International Digi PortServer TS · Digi International Digi One SP · Digi International Digi One SP IA · Digi International Digi One IA

    A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).

  2. CVE-2026-12352 5.9 Moyenne

    Digi International PortServer TS 1/2/4 · Digi International Digi One SP / SP IA / IA

    This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.