CVE-2026-75937

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Oct 2, 2026
Source updated: Oct 3, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

OS Command Injection in Digi Accelerated Linux (DAL OS)

A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

IX Family

Vendor: Digi International
Product: IX Family
Platforms: Unknown
Default status: unaffected

IX Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

EX Family

Vendor: Digi International
Product: EX Family
Platforms: Unknown
Default status: unaffected

EX Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

TX Family

Vendor: Digi International
Product: TX Family
Platforms: Unknown
Default status: unaffected

TX Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

Connect IT Family

Vendor: Digi International
Product: Connect IT Family
Platforms: Unknown
Default status: unaffected

Connect IT Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

AnywhereUSB Plus Family

Vendor: Digi International
Product: AnywhereUSB Plus Family
Platforms: Unknown
Default status: unaffected

AnywhereUSB Plus Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

Connect EZ Family

Vendor: Digi International
Product: Connect EZ Family
Platforms: Unknown
Default status: unaffected

Connect EZ Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

XBee Hive Gateway

Vendor: Digi International
Product: XBee Hive Gateway
Platforms: Unknown
Default status: unaffected

XBee Hive Gateway · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

XBee Hive Border Router for Wi-SUN

Vendor: Digi International
Product: XBee Hive Border Router for Wi-SUN
Platforms: Unknown
Default status: unaffected

XBee Hive Border Router for Wi-SUN · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	26.7.90.14	None listed

Digi 54xx Family

Vendor: Digi International
Product: Digi 54xx Family
Platforms: Unknown
Default status: unaffected

Digi 54xx Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	21.8.24.139	None listed

Digi 63xx Family

Vendor: Digi International
Product: Digi 63xx Family
Platforms: Unknown
Default status: unaffected

Digi 63xx Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	22.5.50.66	None listed

Digi IX14

Vendor: Digi International
Product: Digi IX14
Platforms: Unknown
Default status: unaffected

Digi IX14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	22.5.50.62	None listed

Digi LR54 Family

Vendor: Digi International
Product: Digi LR54 Family
Platforms: Unknown
Default status: unaffected

Digi LR54 Family · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
21.8.24.139	`affected`	custom	Unavailable	23.12.1.56	None listed