Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Blair2004 Clear all filters
TI-2026-81651 CVE-2026-117606 · GHSA-8px7-qjpp-cj5c

Missing authorization in NexoPOS cash register session actions

Priority MEDIUM 57

NexoPOS through 6.3.0 contains a missing authorization vulnerability that allows authenticated cashiers to manipulate other cashiers' register sessions because CashRegistersService never compares used_by with the user.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00293 Published 2026-10-28 No fix listed CWE-639
TI-2026-75423 CVE-2026-111637 · GHSA-222q-33hf-4cp6

Missing authentication in NexoPOS exposes transaction records

Priority HIGH 70

NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00465 Published 2026-10-16 No fix listed CWE-306