nuxsmin sysPass vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20265

Newest CVEs

• CVE-2026-63725

  sysPass FileBackupService Authenticated OS Command Injection via Backup Path

  nuxsmin · sysPass

  High8.6
• CVE-2026-65711

  sysPass 3.2.11 Authenticated OS Command Injection via Backup Path

  nuxsmin · sysPass

  High8.6
• CVE-2026-65710

  sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

  nuxsmin · sysPass

  High7.1
• CVE-2026-65709

  sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API

  nuxsmin · sysPass

  High8.7
• CVE-2026-65708

  sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

  nuxsmin · sysPass

  High8.6
• CVE-2022-4930

  nuxsmin sysPass URL cross site scripting

  nuxsmin · sysPass

  Low3.5