How to fix CVE-2024-26291?

Within 24 hours: Inventory all affected systems and document their business criticality and data sensitivity. Within 7 days: Deploy vendor-released patch across all non-production environments and conduct testing to validate functionality and compatibility. Within 30 days: Complete patch deployment to all production systems, prioritizing assets handling confidential or regulated data, and verify patch installation across your infrastructure.

CVE-2024-26291

EUVD-2024-23562 HIGH

Improper Authorization (CWE-285)

2025-07-14 a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Information Disclosure

8.7

CVSS 4.0

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:26 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2025.5.1

Analysis Generated

Mar 16, 2026 - 09:43 vuln.today

EUVD ID Assigned

Mar 16, 2026 - 09:43 euvd

EUVD-2024-23562

CVE Published

Jul 14, 2025 - 09:15 nvd

HIGH 8.7

DescriptionNVD

An Unauthenticated Arbitrary File Read vulnerability affects the Agent when installed on a system. The parameter filename does not validate the path thus allowing users to read arbitrary files. As the application runs with the highest privileges (root/NT_AUTHORITY SYSTEM) by default attackers are able to obtain sensitive information.

This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.

AnalysisAI

A information disclosure vulnerability (CVSS 8.7). High severity vulnerability requiring prompt remediation.

Technical ContextAI

CWE-285 (Improper Authorization). CVSS 8.7 indicates high severity.

RemediationAI

Monitor vendor channels for patch availability.

CVE-2024-26291 vulnerability details – vuln.today

Back