Advisories · Technology

Blair2004 NexoPOS.

Every CVE that names Blair2004 NexoPOS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-117606 CVE record

CVSS 5.3 Medium

NexoPOS through 6.3.0 Missing Authorization via Cash Register Session Actions
- Blair2004 NexoPOS
- Broken access control
Not analysed yet 28 Oct 2026
CVE-2026-111637 CVE record

CVSS 6.9 Medium

NexoPOS through 6.2.4 Unauthenticated Transaction Disclosure via /api/fields Endpoint
- Blair2004 NexoPOS
- Authentication bypass
Not analysed yet 16 Oct 2026