cvedb.io
CVE-2025-32406
HIGH · CVSS 8.6
EPSS exploitation probability: 0%
Published 2025-04-08T15:15:50.677 · Last modified 2026-06-17T09:11:57.100

Summary

An XXE issue in the Director NBR component in NAKIVO Backup & Replication 10.3.x through 11.0.1 before 11.0.2 allows remote attackers fetch and parse the XML response.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.