CVE-2026-12352

Incorrect Authorization

This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.

Affected

Digi International · PortServer TS 1/2/4 · Digi One SP / SP IA / IA

CVSS v3.1 CNA

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.40% chance of exploitation in the next 30 days, 33rd percentile

Published

2026-07-07

Updated

2026-07-13

Proof-of-concept exploits (1)

• nvicloud/CVE-2026-123520★ · 2026-07-13

References

• CVE Record
• NVD entry

Related

• CVE-2026-12948