DigiWin
Vulnerability activity for DigiWin: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 6
- Critical (CVSS 9+)
- 2
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 8
- Critical (CVSS 9+)
- 4
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.1MediumSep 30, 2026DigiWin EasyFlow .NET XSSCVE-2026-102459EasyFlow .NET developed by Digiwin has a Reflected Cross-site Scripting vulnerability. Unauthenticated remote attackers can execute arbitrary JavaScript codes in user's browser through phishing attacks.
- 9.8CriticalSep 30, 2026DigiWin EasyFlow .NET Auth bypass / access controlCVE-2026-102458EasyFlow .NET developed by Digiwin has a Missing Authentication vulnerability. Unauthenticated remote attackers can obtain other users' plaintext passwords through a specific API.
- 6.5MediumSep 30, 2026DigiWin EasyFlow .NET Path traversal / file handlingCVE-2026-102457EasyFlow .NET developed by Digiwin has an Arbitrary File Read vulnerability. Authenticated remote attackers can exploit this vulnerability to download arbitrary system files.
- 6.5MediumSep 30, 2026DigiWin EasyFlow .NET SQL injectionCVE-2026-102456EasyFlow .NET developed by Digiwin has an SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL commands to read database contents.
- 9.8CriticalSep 30, 2026DigiWin EasyFlow .NET DeserializationCVE-2026-102455EasyFlow .NET developed by Digiwin has a Insecure Deserialization vulnerability. Unauthenticated remote attackers can execute arbitrary code on the server by sending maliciously crafted serialized content.
- 7.2HighSep 30, 2026DigiWin EasyFlow .NET Path traversal / file handlingCVE-2026-102454EasyFlow .NET developed by Digiwin has an Arbitrary File Upload vulnerability. Privileged remote attackers can upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
- 9.8CriticalApr 20, 2026Digiwin easyflow .net SQL injectionCVE-2026-5964EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- 9.8CriticalApr 20, 2026Digiwin easyflow .net SQL injectionCVE-2026-5963EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
Top products
- EasyFlow .NET8 CVEs in the last year, 4 critical
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.