CVE-2026-8931

CriticalCVSS 9.4

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.72%

50th percentile - higher than 50% of all known CVEs

Summary

A critical Remote Code Execution (RCE) vulnerability in Disig Web Signer versions 2.0.3 through 2.5.3. Allows an attacker to execute arbitrary code remotely on the server.

Risk Assessment

An attacker can take over the server, steal data, or install malware.

Recommendation

Immediately update Disig Web Signer to the latest available version that fixes this vulnerability.

Original NVD description (English source)

A critical Remote Code Execution (RCE) vulnerability exists in Disig Web Signer versions 2.0.3 through 2.5.3.