Nuxsmin Syspass
5 CVEs affecting Nuxsmin Syspass. Latest disclosed: 2026-07-24. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65709 | High | 8.3 | 2026-07-24 | sysPass through version 3.2.11 contains a missing object-level authorization vulnerability in the JSON-RPC API that allows API token holders to enumerate accou… |
CVE-2026-65708 | High | 8.1 | 2026-07-24 | sysPass through version 3.2.11 contains an insecure direct object reference vulnerability that allows any authenticated attacker to access account file attachm… |
CVE-2026-65711 | High | 7.2 | 2026-07-24 | sysPass through version 3.2.11 contains an OS command injection vulnerability that allows authenticated administrators to execute arbitrary commands as the web… |
CVE-2026-65710 | High | 7.1 | 2026-07-24 | sysPass through version 3.2.11 contains a missing authorization vulnerability that allows authenticated users with the PUBLICLINK_CREATE profile flag to trigge… |
CVE-2022-4930 | Low | 3.5 | 2023-03-06 | A vulnerability classified as problematic was found in nuxsmin sysPass up to 3.2.4. Affected by this vulnerability is an unknown functionality of the component… |