CVE-2021-26613: Tobesoft Nexacro

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method.

Affected products

• Tobesoft Nexacro: from 17.0, before 17.1.2.500 (fixed in 17.1.2.500)

Published 2022-02-09. Last modified 2026-06-17.