PatchTheCVEnexacro vulnerabilities and fixes
Recent CVEs affecting nexacro, with upgrade or downgrade steps. 5 tracked.
nexacro has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-04-19. Highest priority: CVE-2021-26607 (score 48/100).
- CVE-2021-26625 HIGH 8.8 UPGRADE Insufficient Verification of input Data leading to arbitrary file download and execute was discovered in Nexac
- CVE-2021-26613 HIGH 8.1 UPGRADE improper input validation vulnerability in nexacro permits copying file to the startup folder using rename met
- CVE-2021-26612 HIGH 8.1 UPGRADE An improper input validation leading to arbitrary file creation was discovered in copy method of Nexacro platf
- CVE-2021-26607 HIGH 8.1 UPGRADE An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arb
- CVE-2020-7874 HIGH 8.8 UPGRADE Download of code without integrity check vulnerability in NEXACRO14 Runtime ActiveX control of tobesoft Co., L
FAQ
How do I fix nexacro vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nexacro being exploited right now?
None of the tracked nexacro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nexacro CVE should I patch first?
CVE-2021-26607 currently ranks highest (48/100): An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arb.