high8.7
CVE-2024-26293
The Avid Nexis Agent uses a vulnerable gSOAP version.
Impact
The Avid Nexis Agent uses a vulnerable gSOAP version. An undocumented vulnerability impacting gSOAP v2.8 makes the application vulnerable to an Unauthenticated Path Traversal vulnerability. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avid | Avid NEXIS E-Series | before 2025.5.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.