{"id":"CVE-2026-107092","published":"2026-10-26T14:16:23.737","lastModified":"2026-10-26T18:41:21.450","description":"NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"http://nexopos.com","tags":[]},{"url":"https://github.com/raivenLockdown/CVE-2026-107092","tags":[]}],"exploitRefs":[{"url":"https://github.com/raivenLockdown/CVE-2026-107092","tags":[]}],"hasPoc":true,"ai":{"summary":"NexoPOS v6.2.4 contains a directory traversal vulnerability in the /api/update endpoint, allowing unauthenticated attackers to read arbitrary files on the server by manipulating path components in requests.","exploitability":"Exploitation is trivial for remote attackers due to lack of authentication or input validation on the vulnerable endpoint.","blast_radius":"Successful exploitation could lead to full system compromise via exposure of sensitive configuration files, credentials, or source code, enabling further attacks such as lateral movement or data exfiltration.","remediation":"Upgrade to NexoPOS v6.2.5 or later, which patches the directory traversal vulnerability in the /api/update endpoint.","detection":"Defenders should monitor web server access logs for requests to /api/update containing path traversal sequences (e.g., '../' or encoded variants like '%2e%2e/') in the URI or query parameters.","tags":["directory-traversal","web-app","no-auth","sensitive-file-exposure"],"model":"garnet-coder","analyzedAt":"2026-10-27T08:47:41.192Z"}}