Avid NEXIS PRO+ vulnerabilities

3 known vulnerabilities in Avid NEXIS PRO+ from Avid. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Avid NEXIS E-series: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-26292Jul 14, 2025Avid

  An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA

• 8.7 High severity

  Avid NEXIS E-series: Improper Authorization

  CVE-2024-26291Jul 14, 2025AvidEPSS 1.16%

  An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHO

• 8.7 High severity

  Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS…

  CVE-2024-26290Mar 12, 2025Avid

  Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permis