CVE Catalog

CVE-2026-28165

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Summary

Unauthenticated Privilege Escalation in Digits versions up to 9.2. An attacker can gain elevated privileges without authentication.

Risk Assessment

Potential takeover of admin accounts and full system control.

Recommendation

Update Digits to a version newer than 9.2 that includes the fix.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Digits <= 9.2 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS