Next4Biz Information Technologies Inc. vulnerabilities
Published CVEs affecting Next4Biz Information Technologies Inc. products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-7861
Critical · 9.8
CWE-502 Sep 7, 2026
Code Injection in Next4Biz's CSM (Customer Service Management)
Deserialization of untrusted data vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Code Injection.
This issue affects CSM (Customer Service Management): before 8.0.3.
CVE-2026-6377
High · 7.5
CWE-22 Sep 7, 2026
Path Traversal in Next4Biz's CSM (Customer Service Management)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal.
This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.