What is the CVSS score of CVE-2024-26292?

CVE-2024-26292 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2024-26292?

Within 24 hours: identify all systems running affected product versions and assess file access controls. Within 7 days: apply vendor-released patch to all affected systems and validate deployment. Within 30 days: conduct access logs review for suspicious file retrieval activity and implement file integrity monitoring if not already in place.

CVE-2024-26292

EUVD-2024-23563 HIGH

Path Traversal (CWE-22)

2025-07-14 a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Information Disclosure

7.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.1 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:26 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

2025.5.1

EUVD ID Assigned

Mar 16, 2026 - 09:43 euvd

EUVD-2024-23563

Analysis Generated

Mar 16, 2026 - 09:43 vuln.today

CVE Published

Jul 14, 2025 - 09:15 nvd

HIGH 7.1

DescriptionCVE.org

An authenticated Arbitrary File Deletion vulnerability enables an attacker to delete critical files. This issue affects Avid NEXIS E-series: before 2025.5.1; Avid NEXIS F-series: before 2025.5.1; Avid NEXIS PRO+: before 2025.5.1; System Director Appliance (SDA+): before 2025.5.1.