Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers are able to obtain sensitive information. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🚨 CVE-2024-26291 - high 🚨 Avid NEXIS Agent - Arbitrary File Read > Avid NEXIS E-series, F-series, PRO+, and System Director Appliance (SDA+) before 2025... 👾 https://cloud.projectdiscovery.io/library/CVE-2024-26291 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE‑2024‑26291, an arbitrary file‑read flaw in Avid NEXIS devices, and links to a Project Discovery library entry for further details.