https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T20:45:25.565374+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-26291 CVE-2024-26291 — Authenticated Arbitrary File Read affecting Avid NEXIS 2026-10-07T20:45:25.566524+00:00

Affected: Avid NEXIS E-series, Avid NEXIS F-series, Avid NEXIS PRO+, Avid System Director Appliance (SDA+)

An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers are able to obtain sensitive information.

This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.