nuxsmin sysPass

• CVE-2026-63725 High 7.2 sysPass FileBackupService Authenticated OS Command Injection via Backup Path 0.4%
• CVE-2026-65711 High 7.2 sysPass 3.2.11 Authenticated OS Command Injection via Backup Path 2.0%
• CVE-2026-65710 High 7.1 sysPass 3.2.11 Missing Authorization via PublicLinkController Account Decryption 0.3%
• CVE-2026-65709 High 8.3 sysPass 3.2.11 Missing Object-Level Authorization via JSON-RPC API 0.4%
• CVE-2026-65708 High 8.1 sysPass 3.2.11 Insecure Direct Object Reference via AccountFileController 0.4%
• CVE-2022-4930 Low 3.5 nuxsmin sysPass URL cross site scripting 0.5%