Digi International Connect IT Family vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Digi International Connect IT Family: 1 record(s), with affected versions and fixes.

CVE-2026-75937 Critical · 9.4 CWE-78 Oct 2, 2026

OS Command Injection in Digi Accelerated Linux (DAL OS)

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.