NexoPOS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

Review NexoPOS CVE published 2026-10-26

CVE-2026-107092

CVE-2026-107092 is a directory traversal vulnerability in NexoPOS v6.2.4 via the api/update endpoint. The CVE record was published on 2026-10-26 and has not been modified since then. The NVD entry is currently unclassified. Defenders should assess exposure, particularly those managing or using NexoPOS. The vulnerability may allow unauthorized file access or manipulation. Remediation priority is uncertain [truncated]