https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-27926.htmlhttps://patchthecve.com/cve/CVE-2025-27926.htmlWed, 17 Jun 2026 09:04:24 +0000MEDIUM 4.3: In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users.https://patchthecve.com/cve/CVE-2025-27925.htmlhttps://patchthecve.com/cve/CVE-2025-27925.htmlWed, 17 Jun 2026 09:04:24 +0000HIGH 8.5: Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.https://patchthecve.com/cve/CVE-2025-27924.htmlhttps://patchthecve.com/cve/CVE-2025-27924.htmlWed, 17 Jun 2026 09:04:24 +0000MEDIUM 5.4: Nintex Automation 5.6 and 5.7 before 5.8 has a stored XSS issue associated with the "Navigate to a URL" action.https://patchthecve.com/cve/CVE-2024-9845.htmlhttps://patchthecve.com/cve/CVE-2024-9845.htmlWed, 17 Jun 2026 08:25:22 +0000HIGH 7.8: Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation.