CVE-2024-26290: Avid Nexis E-Series

High severity, CVSS 8.7. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Input Validation vulnerability in Avid Avid NEXIS E-series on Linux, Avid Avid NEXIS F-series on Linux, Avid Avid NEXIS PRO+ on Linux, Avid System Director Appliance (SDA+) on Linux allows code execution on underlying operating system with root permissions.This issue affects Avid NEXIS E-series: before 2024.6.0; Avid NEXIS F-series: before 2024.6.0; Avid NEXIS PRO+: before 2024.6.0; System Director Appliance (SDA+): before 2024.6.0.

Affected products

• Avid Avid Nexis E-Series: before 2024.6.0 (fixed in 2024.6.0)
• Avid Avid Nexis F-Series: before 2024.6.0 (fixed in 2024.6.0)
• Avid Avid Nexis Pro+: before 2024.6.0 (fixed in 2024.6.0)
• Avid System Director Appliance Sda+: before 2024.6.0 (fixed in 2024.6.0)

Published 2025-03-12. Last modified 2026-06-17.