CVE-2026-59112

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.

CVSS v4.0

4.4 MEDIUMCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.11% chance of exploitation in the next 30 days, 2th percentile

Published

2026-08-10

Proof-of-concept exploits (1)

• orasmaem/libdigidocpp-vulnerability0★ · 2026-08-29

References

• CVE Record
• NVD entry

Related

• CVE-2026-59102
• CVE-2026-59197
• CVE-2026-59100
• CVE-2026-59198
• CVE-2026-59099
• CVE-2026-59199