CRITICAL Published Oct 26, 2026 CVE-2026-107092 CVE-2026-107092 published: NexoPOS v6.2.4 is vulnerable to Directory Traversal via the api/update endpoint. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch