VYPR

Nexis Agent

by Avid

CVEs (2)

  • CVE-2024-26293HigJul 14, 2025
    risk 0.57cvss epss 0.00

    The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before…

  • CVE-2024-26291HigJul 14, 2025
    risk 0.57cvss epss 0.01

    An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by…