Advisories · Technology

Digi International Digi PortServer TS.

Every CVE that names Digi International Digi PortServer TS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-12948 CVE record

CVSS 4.8 Medium

Stored Cross-Site Scripting (XSS)
- Digi International Digi PortServer TS
- Digi International Digi One SP
- Cross-site scripting (XSS)
Not analysed yet 7 Jul 2026
CVE-2025-3659 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Improper authentication handling for Digi PortServer TS; Digi One SP, SP IA, IA; Digi One IAP
- Digi International Digi PortServer TS
- Digi International Digi One SP/Digi One SP IA/Digi One IA
- Authentication bypass
Not analysed yet 12 May 2025
CVE-2023-4299 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Digi RealPort Protocol Use of Password Hash Instead of Password for Authentication
- Digi International Digi RealPort
- Digi International Digi ConnectPort TS 8/16
- CWE-836
Not analysed yet 31 Aug 2023