DigiDoc CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH DigiDoc CVE published 2026-10-12

CVE-2026-103902

The DigiDoc improper signature verification vulnerability allows an attacker to create forged digital signatures that are displayed as valid by affected DigiDoc software. Affected products include libdigidocpp from 4.0.0 before 4.5.0, DigiDoc4 from 4.6.0 before 4.11.0, DigiDoc Android from 2.7.0 before 3.1.0, and DigiDoc iOS from 2.7.0 before 3.1.0. Users should assess exposure, verify versions, and apply [truncated]