This vulnerability (CVE-2026-12352) affects Digi International PortServer TS 1/2/4 devices, version 82000747_V1. It enables an unauthenticated attacker to bypass authentication controls, thereby gaining unauthorized access to restricted device resources. The issue is classified as CWE-863, indicating an authorization bypass flaw. The CVSS v3.1 base score is 5.9, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No patch or official remediation level has been disclosed by the vendor as of the published date.

An unauthenticated attacker can bypass authentication mechanisms on affected Digi PortServer TS devices, potentially exposing sensitive or restricted resources. The confidentiality impact is high, meaning sensitive information could be disclosed. There is no impact on integrity or availability according to the CVSS vector. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently documented, users should monitor vendor communications for updates. Until a patch is available, restrict network access to the affected device to trusted sources only to reduce exposure.