CVE-2026-59112CWE-347CWE-754

CVE-2026-59112

published August 10, 2026

CVSS
4.4
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.

The record
Technical detail
CVSS
4.4 · NONE
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Weaknesses
CWE-347 · Improper Verification of Cryptographic Signature; CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2026-08-10T18:17Z
References (4)
https://github.com/open-eid/libdigidocpp/pull/690 · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158https://www.id.ee/en/article/ria-soovitab-kasutajatel-uuendada-id-tarkvara-eng/ · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158https://www.ria.ee/blogi/digidoc-rakendustes-esinenud-turvanorkus-mis-juhtus-ja-kuidas-see-parandati · a6d3dc9e-0591-4a13-bce7-0f5b31ff6158https://github.com/open-eid/libdigidocpp/pull/690 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 10 AUG 13:57Z
    Signature validation vulnerability affecting DigiDoc applications
    cvelistv5