Skip to content
Threat Feed
Subscribe

Vendor

Digi International

1 brief RSS
high threat

Multiple Vulnerabilities in Digi International PortServer TS and Digi One SP IA Devices

Multiple vulnerabilities, including CVE-2026-12352 (incorrect authorization) and CVE-2026-12948 (stored cross-site scripting), affect Digi International PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA devices with firmware prior to 2025, allowing unauthenticated bypass, access to restricted resources, credential acquisition, and client-side script execution in critical infrastructure environments.

exploited PortServer TS +3 ics ot network webserver vulnerability authentication-bypass xss critical-manufacturing +3
2t 2c