CVE-2026-107092

Published: Ott 26, 2026 Last Modified: Ott 26, 2026

ExploitDB:

Other exploit source:

Google Dorks:

CRITICAL 9,8

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: none

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.

http://nexopos.com