Digital Knowledge vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Digital Knowledge products: 1 record(s), with severity, exploitation and fixes.

KnowledgeDeliver 1

Exploited only (KEV) →

CVE-2026-5426 Critical · 9.1 CWE-321 Apr 16, 2026

Digital Knowledge KnowledgeDeliver hard-coded machineKey ViewState deserialization RCE

Hard-coded ASP.NET/IIS machineKey value in Digital Knowledge KnowledgeDeliver deployments prior to February 24, 2026 allows adversaries to circumvent ViewState validation mechanisms and achieve remote code execution via malicious ViewState deserialization attacks