PT-2026-110524 · Unknown+1 · Libdigidocpp+3
CVE-2026-103902
·
Published
2026-10-12
·
Updated
2026-10-12
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
libdigidocpp versions 4.0.0 through 4.4.9
DigiDoc4 versions 4.6.0 through 4.10.9
DigiDoc Android versions 2.7.0 through 3.0.9
DigiDoc iOS versions 2.7.0 through 3.0.9
Description
Improper verification of cryptographic signatures allows an attacker to create forged digital signatures that the affected software incorrectly identifies as valid.
Recommendations
Update libdigidocpp to version 4.5.0 or later.
Update DigiDoc4 to version 4.11.0 or later.
Update DigiDoc Android to version 3.1.0 or later.
Update DigiDoc iOS to version 3.1.0 or later.
Fix
Improper Verification of Cryptographic Signature
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Digidoc On Android
Digidoc Ios
Digidoc4
Libdigidocpp