Nelio Software

11 CVEs across 3 Nelio Software products. Browse Nelio Software vulnerabilities, severities, and proof-of-concept exploits.

Nelio Software products with known CVEs

ProductCVEs
Nelio Content5
Nelio Ab Testing4
Nelio Popups2
Nelio Software CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57648Medium4.32026-06-26Contributor Broken Access Control in Nelio Content <= 4.3.4 versions.
CVE-2026-40742Medium5.32026-04-15Missing Authorization vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Exploiting Incorrectly Configured Access Control Security Levels…
CVE-2026-39521Medium4.92026-04-08Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content nelio-content allows Server Side Request Forgery.This issue affects Nelio Cont…
CVE-2026-32573Critical9.12026-03-25Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue af…
CVE-2026-25378High7.62026-02-19Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows B…
CVE-2026-25016Medium4.32026-02-03Missing Authorization vulnerability in Nelio Software Nelio Popups nelio-popups allows Exploiting Incorrectly Configured Access Control Security Levels.This is…
CVE-2026-24572High8.52026-01-23Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nelio Software Nelio Content nelio-content allows Blind S…
CVE-2025-67944Critical9.12026-01-22Improper Control of Generation of Code ('Code Injection') vulnerability in Nelio Software Nelio AB Testing nelio-ab-testing allows Code Injection.This issue af…
CVE-2025-66111Medium6.52025-11-21Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nelio Software Nelio Popups nelio-popups allows Stored XS…
CVE-2025-62927Medium6.52025-10-27Missing Authorization vulnerability in Nelio Software Nelio Content nelio-content allows Exploiting Incorrectly Configured Access Control Security Levels.This…
CVE-2024-30531Medium4.92024-04-02Server-Side Request Forgery (SSRF) vulnerability in Nelio Software Nelio Content.This issue affects Nelio Content: from n/a through 3.2.0.