High severity7.5NVD Advisory· Published Oct 12, 2026

CVE-2026-103902

Description

Improper verification of cryptographic signature vulnerability in DigiDoc libdigidocpp, DigiDoc DigiDoc4, DigiDoc DigiDoc Android, and DigiDoc DigiDoc iOS. The vulnerability allows an attacker to create forged digital signatures that are displayed a valid by affected DigiDoc software.This issue affects libdigidocpp: from 4.0.0 before 4.5.0; DigiDoc4: from 4.6.0 before 4.11.0; DigiDoc Android: from 2.7.0 before 3.1.0; DigiDoc iOS: from 2.7.0 before 3.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DigiDoc/DigiDoc4llm-create
Range: >=4.6.0 <4.11.0
DigiDoc/DigiDoc Androidllm-create
Range: >=2.7.0 <3.1.0
DigiDoc/DigiDoc iOSllm-create
Range: >=2.7.0 <3.1.0
Open Eid/libdigidocppllm-fuzzy
Range: >=4.0.0 <4.5.0

Patches

Vulnerability mechanics

References

github.com/open-eid/libdigidocpp/pull/735nvd
www.id.ee/en/article/id-tarkvara-uus-versioon-267-on-avalikustatud/nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000