CVE-2026-54810: Nexi Payments Nexi Xpay

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in Nexi Payments Nexi XPay allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexi XPay: from n/a through 8.3.1.

Affected products

• Nexi Payments Nexi Xpay: up to and including 8.3.1

Published 2026-06-17. Last modified 2026-06-17.