CVE-2026-70383

UNKNOWN 0.0

Arbitrary file overwrite vulnerability in DigiDoc4 client

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0.

CWE	CWE-22
Vendor	estonian information system authority (ria)
Product	digidoc4
Published	Aug 20, 2026

Stay Ahead of the Next One

Get instant alerts for estonian information system authority (ria) digidoc4

Be the first to know when new unknown vulnerabilities affecting estonian information system authority (ria) digidoc4 are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Estonian Information System Authority (RIA) / DigiDoc4

4.0.0 < 4.11.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/open-eid/libdigidocpp/pull/736 github.com: https://github.com/open-eid/DigiDoc4-Client/pull/1402 github.com: https://github.com/open-eid/DigiDoc4-Client

Credits

Siva Aditya Panuganti, Aditya Security Labs