CVE-2026-59112
Signature validation vulnerability affecting DigiDoc applications
MEDIUM 4.4EPSS 0.1%
Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.
- Affected
- Estonian Information System Authority (RIA) · libdigidocpp · DigiDoc4 · DigiDoc
- CVSS v4.0 CNA
- 4.4 MEDIUM
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS
- 0.12% chance of exploitation in the next 30 days, 2nd percentile
- Published
- 2026-08-10
Proof-of-concept exploits (1)
- orasmaem/libdigidocpp-vulnerability0★ · 2026-09-27