Digi International vulnerabilities
We track 2 vulnerabilities in Digi International products across 15 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 2, 2026.
2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score
Latest Digi International vulnerabilities
- 9.4 Critical severity
IX Family: Improper Neutralization of Special Elements used in an OS Command
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.
- 9.4 Critical severity
Digi PortServer TS: Improper Authentication
Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - prior to and including 82000747_AA, build date 06/17/2022 * Digi One SP/Digi One SP IA/Digi One IA - prior to and in