OS Command Injection in Digi Accelerated Linux (DAL OS)
A specially crafted HTTP POST request to the web administration interface allows an unauthenticated attacker to execute arbitrary operating system commands with root privileges on the affected device. Disable the web server when not configuring the device.
CVE-2026-75937
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-75937
IX Family
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
EX Family
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
TX Family
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Connect IT Family
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
AnywhereUSB Plus Family
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Connect EZ Family
Source reference: /containers/cna/affected/5/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
XBee Hive Gateway
Source reference: /containers/cna/affected/6/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
XBee Hive Border Router for Wi-SUN
Source reference: /containers/cna/affected/7/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Digi 54xx Family
Source reference: /containers/cna/affected/8/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Digi 63xx Family
Source reference: /containers/cna/affected/9/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Digi IX14
Source reference: /containers/cna/affected/10/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Digi LR54 Family
Source reference: /containers/cna/affected/11/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Digi International",
"product": "IX Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "EX Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "TX Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "Connect IT Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "AnywhereUSB Plus Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "Connect EZ Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "XBee Hive Gateway",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "XBee Hive Border Router for Wi-SUN",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "26.7.90.14"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "Digi 54xx Family",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "21.8.24.139"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "Digi 63xx Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "22.5.50.66"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "Digi IX14",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "22.5.50.62"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Digi International",
"product": "Digi LR54 Family",
"versions": [
{
"status": "affected",
"version": "21.8.24.139",
"versionType": "custom",
"lessThanOrEqual": "23.12.1.56"
}
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-75937
Source reference:
/cveMetadata/cveId
Publisher severity
critical
Source reference: /containers/cna/metrics
- Event
- #8426 · Revision 1
- Added to Heist Feed
- Publisher date