CRITICAL
UnitedOver, LLC
CVE published 2026-08-24
CVE-2026-28165
CVE-2026-28165 is a critical unauthenticated privilege escalation vulnerability in the Digits plugin versions up to 9.2. The vulnerability has a CVSS score of 9.8 and is considered critical. The CVE record was published on 2026-08-24T12:16:50.600Z and was last modified on 2026-10-12T15:10:00.207Z.