CVE record · 1 source
CVE-2026-111637
CVSS 5.3NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records…
- CVSS
- 5.3
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records…
NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accounting transaction records via GET /api/fields/{resource}/{identifier}. Attackers can request transaction…