TL;DR Digi International disclosed CVE-2026-75937, a critical Digi DAL OS vulnerability scored 9.4 on CVSS 4.0. One crafted HTTP POST to the web admin interface can run commands as root. Digi has shipped patches for most devices, but several end-of-life models will never get one. Why It Matters Digi Accelerated Linux (DAL OS) runs on Digi's IX, EX, and TX cellular routers, Connect IT and Connect EZ console servers, AnywhereUSB hubs, and XBee gateways.