CVE-2026-8931 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	UNKNOWN				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-94 - Improper Control of Generation of Code ('Code Injection')
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References

https://download.disigcdn.sk/cdn/products/websigner2/changelog.en.txt

https://download.disigcdn.sk/cdn/products/websigner2/changelog.sk.txt

https://qesportal.sk/Portal/en/Info/News#websigner255

https://qesportal.sk/Portal/sk/Info/News#websigner255

https://www.disig.sk/en/news/important-update-of-the-web-signer-application/

https://www.disig.sk/sk/aktuality/dolezita-aktualizacia-aplikacie-web-signer/