Product by Nuxsmin

    sysPass

    7 known vulnerabilities in sysPass (Nuxsmin), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in sysPass (Nuxsmin)
    HighCVE-2026-65711

    sysPass 3.2.11 Authenticated OS Command Injection via Backup Path

    		7.2
    CriticalCVE-2026-129110

    sysPass 3.0.1 through 3.2.11 Unauthenticated Reinstallation RCE via install/install

    		9.8
    HighCVE-2026-63725

    sysPass FileBackupService Authenticated OS Command Injection via Backup Path

    		7.2
    HighCVE-2026-65709

    sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API

    		8.3
    HighCVE-2026-65708

    sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController

    		8.1
    HighCVE-2026-65710

    sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption

    		7.1
    MediumCVE-2022-4930

    nuxsmin sysPass URL cross site scripting

    also in 1 other product

    		3.5

    All products by Nuxsmin