Improper Input Validation Vulnerability in Avid NEXIS Products on Linux
CVE-2024-26290

8.7HIGH

Key Information:

Vendor

Avid

Status
Avid Nexis E-series
Avid Nexis F-series
Avid Nexis Pro+
System Director Appliance (sda+)
Vendor
CVE Published:
12 March 2025

What is CVE-2024-26290?

An improper input validation vulnerability exists in Avid NEXIS E-series, F-series, PRO+, and System Director Appliance on Linux. This flaw permits attackers to execute arbitrary code on the underlying operating system with root permissions, potentially compromising system integrity and security. Users are advised to update their products to versions 2024.6.0 or later to mitigate this risk and protect their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Avid NEXIS E-series Linux 0 < 2024.6.0

Avid NEXIS F-series Linux 0 < 2024.6.0

Avid NEXIS PRO+ Linux 0 < 2024.6.0

References

https://www.drive-byte.de/en/blog/avid-nexis-agent-multip...
third-party-advisory
https://kb.avid.com/pkb/articles/troubleshooting/en239659
vendor-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

DriveByte
JSON
.