This vulnerability (CVE-2026-12352) affects Digi International PortServer TS 1/2/4 devices, specifically version 82000747_V1. It allows an unauthenticated attacker to bypass authentication controls and gain access to restricted resources on the device. The issue is classified under CWE-863, indicating an authorization bypass flaw. The CVSS v3.1 base score is 5.9, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. No official fix or patch has been published by the vendor as of the publication date.

An unauthenticated attacker can bypass authentication mechanisms on affected PortServer TS devices, potentially accessing sensitive or restricted resources. This could lead to unauthorized information disclosure. There is no indication of impact on integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected devices to trusted management networks and monitor for unauthorized access attempts. Follow any vendor recommendations once published.