[ Vendor · 6 CVEs ]
DigiWin
CVEs affecting DigiWin published in the last 30 days, plus any DigiWin CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102454 | 30 Sep 2026 | CVSS 7.2 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell… | |
| CVE-2026-102455 | 30 Sep 2026 | CVSS 9.8 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the… | |
| CVE-2026-102456 | 30 Sep 2026 | CVSS 6.5 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read… | |
| CVE-2026-102457 | 30 Sep 2026 | CVSS 6.5 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to… | |
| CVE-2026-102458 | 30 Sep 2026 | CVSS 9.8 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext… | |
| CVE-2026-102459 | 30 Sep 2026 | CVSS 6.1 | DigiWin EasyFlow .NETEasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary… |