Digi One Sp CVEs and Security Vulnerabilities

Vulnerabilities (Digi One Sp)

CVE-2026-12352

Incorrect Authorization

This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Digi International

Products

Digi One Sp / Sp Ia / Ia Portserver Ts 1/2/4

CVE-2026-12948

Stored Cross-Site Scripting (XSS)

A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Digi International

Products

Digi One Ia Digi One Sp Digi One Sp Ia and 1 more

Search vulnerabilities

Incorrect Authorization

Stored Cross-Site Scripting (XSS)