Read the docs

Estonian Information System Authority (RIA)

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Estonian Information System Authority (RIA) records in CISA KEV

No Estonian Information System Authority (RIA) vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-42285 CVE-2026-59112 · GHSA-cwph-2586-4qwc

Signature validation vulnerability affecting DigiDoc applications

Priority MEDIUM 54

Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiD…

CVSS 4.0MEDIUM 4.4 Local No auth User interaction EPSS 0.00121 Published 2026-08-10 Fixed in 4.2.1, 4.8.2 +2 CWE-347
TI-2026-49182 CVE-2026-70383 · GHSA-48r4-r7pv-pj69

Arbitrary file overwrite vulnerability in DigiDoc4 client

Priority LOW 38

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Estonian Information System Authority (RIA) DigiDoc4 client.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.0019 Published 2026-08-20 Fixed in 4.11.0 CWE-22
Open these records in search →