Archive

7 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /7 August 2026 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.8

CVE-2026-12948 Public exploit

Stored Cross-Site Scripting (XSS)

A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. T…

Digi International Digi PortServer TS Digi One SP Digi One IA

Jul 7, 2026
Medium 5.9

CVE-2026-12352 Public exploit

Incorrect Authorization

This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.

Digi International Digi One SP / SP IA / IA PortServer TS 1/2/4

Jul 7, 2026