Digi International

5 CVEs across 28 Digi International products. Browse Digi International vulnerabilities, severities, and proof-of-concept exploits.

Digi International products with known CVEs

ProductCVEs
Digi Portserver Ts3
Digi One Ia2
Digi One Sp Ia2
Digi 6350-Sr1
Digi Cm Console Server1
Digi Connectcore 8x Products1
Digi Connect Es1
Digi Connectport Lts 8/16/321
Digi Connectport Ts 8/161
Digi Connect Sp1
Digi One Iap1
Digi One Iap Family1
​digi One Sp1
Digi One Sp1
Digi One Sp/digi One Sp Ia/digi One Ia1
Digi One Sp / Sp Ia / Ia1
Digi Passport Console Server1
Digi Portserver Ts Mei1
Digi Portserver Ts Mei Hardened1
Digi Portserver Ts M Mei1
Digi Portserver Ts P Mei1
Digi Realport1
Digi Wr11 Xt1
Digi Wr211
Digi Wr311
Digi Wr44 R1
Portserver Ts 1/2/41
Portserver Ts 161
Digi International CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-129482026-07-07A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allow…
CVE-2026-12352Medium5.92026-07-07This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.
CVE-2025-36592025-05-12Improper authentication handling was identified in a set of HTTP POST requests affecting the following product families: * Digi PortServer TS - prior to a…
CVE-2023-4299Critical9.02023-08-31 Digi RealPort Protocol is vulnerable to a replay attack that may allow an attacker to bypass authentication to access connected equipment.
CVE-2021-38412Critical9.62021-09-17Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication…