cve/2024/CVE-2024-26293.md
2025-09-29 21:09:30 +02:00

1.3 KiB

CVE-2024-26293

Description

The Avid Nexis Agent uses a vulnerable gSOAPversion. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability.This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

POC

Reference

Github

No PoCs found on GitHub currently.