CVE-2026-75937: fallo crítico en Digi International AnywhereUSB Plus Family
OS Command Injection in Digi Accelerated Linux (DAL OS)
Publicada el · Actualizada el
28Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 9.4epss 0.5%
probabilidad de explotación
0.5%top 57% de las CVE
explotación observada
noninguna fuente lo reporta
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Productos afectados
Digi International · AnywhereUSB Plus FamilyDigi International · Connect EZ FamilyDigi International · Connect IT FamilyDigi International · Digi 54xx FamilyDigi International · Digi 63xx FamilyDigi International · Digi IX14Digi International · Digi LR54 FamilyDigi International · EX FamilyDigi International · IX FamilyDigi International · TX FamilyDigi International · XBee Hive Border Router for Wi-SUNDigi International · XBee Hive GatewayReferencias
https://www.digi.com/resources/security