CVE-2026-6377: NEXT4BIZ Information Technologies Inc Csm Customer Service Management

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal. This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.

Affected products

• NEXT4BIZ Information Technologies Inc Csm Customer Service Management: from 6.8.9, before 8.0.3 (fixed in 8.0.3)

Published 2026-09-07. Last modified 2026-09-08.