Critical · 9.4 CVE-2026-8931 EUVD-2026-33648GHSA-vcv9-hx6w-934w

Critical RCE vulnerability in Disig Web Signer

Published Jun 1, 2026 · Updated Jun 1, 2026 · Assigned by SK-CERT

Vendor: Disig Product: Web Signer

Description

A critical Remote Code Execution (RCE) vulnerability exists in Disig Web Signer versions 2.0.3 through 2.5.3.

Affected products

Vendor	Product	Affected	Fixed
Disig	Web Signer	2.0.3 – ≤ 2.5.3	2.5.5

References