NexoPOS - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/vendors/nexopos/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 26 Oct 2026 15:44:24 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgNexoPOS: Directory Traversal via api/update (CVE-2026-107092)https://feed.craftedsignal.io/briefs/2026-10-nexopos-directory-traversal/Mon, 26 Oct 2026 15:44:24 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-nexopos-directory-traversal/NexoPOS version 6.2.4 is vulnerable to Directory Traversal via the api/update endpoint.<p>NexoPOS version 6.2.4 contains a directory traversal vulnerability in the api/update endpoint, as identified by CVE-2026-107092. The CVSS v3.1 base score for this vulnerability is 9.8.</p> criticaladvisory