SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-28165

CRITICAL · CVSS 9.8 EPSS 0.27%

Source: NVD + CISA KEV + EPSS · Published 2026-08-24 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

An unauthenticated privilege escalation vulnerability exists in Digits versions 9.2 and earlier, allowing attackers to gain elevated access to system functionalities without proper authentication. This critical flaw poses significant risks to any organization utilizing affected versions, as it could lead to unauthorized control over sensitive data and operations. Organizations using Digits should prioritize immediate updates to mitigate potential exploitation.

CVE
CVE-2026-28165
Severity
CRITICAL
CVSS
9.8
EPSS
0.27%

Original NVD Description

Unauthenticated Privilege Escalation in Digits <= 9.2 versions.