CVE-2026-12352: Digi International Digi One SP / SP Ia / Ia

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

This vulnerability allows an unauthenticated actor to bypass authentication and gain access to restricted resources on the device.

Affected products

• Digi International Digi One SP / SP Ia / Ia: from 82000774_Z, up to and including 82000774_AB
• Digi International Portserver Ts 1/2/4: from 82000747_V1, up to and including 82000747_AB

Published 2026-07-07. Last modified 2026-07-13.