Blair2004 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Blair2004 CVE published 2026-10-16

CVE-2026-111637

CVE-2026-111637 debrief based on CVE Program and NVD records. NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. The vulnerability has a CVSS score of 6.9 and is classified as MEDIUM severity. Affected users should verify and patch their installations to prevent pote [truncated]