https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:35:30.639985+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336061 EUVD-2026-336061 2026-10-02T11:35:30.642813+00:00 EUVD-2026-336061 https://cve.radiocsirt.org/vuln/fkie_cve-2026-12948 fkie_cve-2026-12948 2026-10-02T11:35:30.642844+00:00

A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).

 https://cve.radiocsirt.org/vuln/ghsa-vr57-6xgh-64rf GHSA-vr57-6xgh-64rf 2026-10-02T11:35:30.642875+00:00

A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages (CWE-79).

 https://cve.radiocsirt.org/vuln/icsa-26-188-07 ICSA-26-188-07 — Digi International PortServer TS, Digi One SP IA 2026-10-02T11:35:30.642892+00:00

The vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device. A stored cross-site scripting (XSS) vulnerability in the web management interface of the Digi PortServer TS, Digi One SP, Digi One SP IA, and Digi One IA allows a remote, authenticated administrator to inject script into certain system configuration fields. The script subsequently executes in the browser of a user who views the affected pages.