Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Critical	9.4	EPSS 0.5%	CVE-2026-75937IX Family · OS command injection Critical9.4EPSS 0.5%2026-10-02GCVE DatabaseCVE-2026-75937 A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device. EPSS 0.5%Vulnerability Digi International #ghsa-qqmh-gh5m-j2h2 #cwe-78	GCVE Database	2026-10-02
Medium	4.8	EPSS 0.4%	CVE-2026-12948Digi PortServer TS · cross-site scripting Medium4.8EPSS 0.4%2026-07-07CVE Database V5CVE-2026-12948 A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79). EPSS 0.4%Vulnerability Digi International #cwe-79	CVE Database V5	2026-07-07
Medium	5.9	EPSS 0.4%	CVE-2026-12352PortServer TS 1/2/4 · CWE-863 Medium5.9EPSS 0.4%2026-07-07CVE Database V5CVE-2026-12352 This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device. EPSS 0.4%Vulnerability Digi International #cwe-863	CVE Database V5	2026-07-07

Showing 1–3 of 3 results