CVE-2026-59112

UNKNOWN 0.0

Signature validation vulnerability affecting DigiDoc applications

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This issue affects libdigidocpp: from 4.1.0 before 4.2.1; DigiDoc4: from 4.7.0 before 4.8.2; DigiDoc on Android: from 2.7.0 before 2.7.2; DigiDoc on iOS: from 2.8.0 before 2.8.1.

CWE	CWE-347 CWE-754
Vendor	estonian information system authority (ria)
Product	libdigidocpp
Published	Aug 10, 2026

Stay Ahead of the Next One

Get instant alerts for estonian information system authority (ria) libdigidocpp

Be the first to know when new unknown vulnerabilities affecting estonian information system authority (ria) libdigidocpp are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Estonian Information System Authority (RIA) / libdigidocpp

4.1.0 < 4.2.1

Estonian Information System Authority (RIA) / DigiDoc4

4.7.0 < 4.8.2

Estonian Information System Authority (RIA) / DigiDoc

2.7.0 < 2.7.2

Estonian Information System Authority (RIA) / DigiDoc

2.8.0 < 2.8.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/open-eid/libdigidocpp/pull/690 id.ee: https://www.id.ee/en/article/ria-soovitab-kasutajatel-uuendada-id-tarkvara-eng/ ria.ee: https://www.ria.ee/blogi/digidoc-rakendustes-esinenud-turvanorkus-mis-juhtus-ja-kuidas-see-parandati

Credits

Burak Can Kus & Aleksander Kamenik (Cybernetica)