Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

nuxsmin vulnerabilities

7 published CVEs name nuxsmin among the affected products.

Newest CVEs

  • CVE-2026-129110

    sysPass 3.0.1 through 3.2.11 Unauthenticated Reinstallation RCE via install/install

    nuxsmin · sysPass

    Critical9.3
  • CVE-2026-63725

    sysPass FileBackupService Authenticated OS Command Injection via Backup Path

    nuxsmin · sysPass

    High8.6
  • CVE-2026-65711

    sysPass 3.2.11 Authenticated OS Command Injection via Backup Path

    nuxsmin · sysPass

    High8.6
  • CVE-2026-65710

    sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

    nuxsmin · sysPass

    High7.1
  • CVE-2026-65709

    sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API

    nuxsmin · sysPass

    High8.7
  • CVE-2026-65708

    sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

    nuxsmin · sysPass

    High8.6
  • CVE-2022-4930

    nuxsmin sysPass URL cross site scripting

    nuxsmin · sysPass

    Low3.5