Read the docs

Blair2004

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Blair2004 records in CISA KEV

No Blair2004 vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-75423 CVE-2026-111637 · GHSA-222q-33hf-4cp6

Missing authentication in NexoPOS exposes transaction records

Priority HIGH 70

NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00465 Published 2026-10-16 No fix listed CWE-306
TI-2026-81651 CVE-2026-117606 · GHSA-8px7-qjpp-cj5c

Missing authorization in NexoPOS cash register session actions

Priority MEDIUM 57

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares used_by with the user.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-10-28 No fix listed CWE-639
Open these records in search →