Avid vulnerabilities
We track 3 vulnerabilities in Avid products across 4 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 14, 2025.
Latest Avid vulnerabilities
- 7.1 High severity
Avid NEXIS E-series: Improper Limitation of a Pathname to a Restricted Directory
An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA
- 8.7 High severity
Avid NEXIS E-series: Improper Authorization
An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHO
- 8.7 High severity
Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS…
Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permis