Vulnerabilities and Security Researches

Nexi XPay, CVE-2026-54810

CVE, Research URL: CVE-2026-54810
Home page URL: Security reports for Nexi XPay
Application: Nexi XPay
Published on: Jun 17, 2026
Research Description: Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexi XPay: from n/a through 8.3.1.
Affected versions: max 8.3.2.
Status: vulnerable