CVE-2026-102459: Digiwin Easyflow .net

Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days.

EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript codes in user's browser through phishing attacks.

Affected products

• Digiwin Easyflow .net: from 6.1, before 6.2 (fixed in 6.2); from 6.6, up to and including 6.6.19; from 8.1, up to and including 8.1.5

Published 2026-09-30. Last modified 2026-09-30.