CVE-2026-107092

CRITICAL NVD

CVSS Score 9.8

Severity CRITICAL

Published Oct 26, 2026

Vendor unknown

Description

NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.