What’s Vulnerable › Products

Nexi XPay Build vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Nexi XPay Build version is affected

Latest Nexi XPay Build vulnerabilities

• CVE-2026-82212 — Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Bypass via NPG Notification Handler (CVSS 7.5)
• CVE-2026-82211 — Nexi XPay Build <= 7.6.2 - Unauthenticated Payment Completion and Order Key Disclosure (CVSS 8.2)
• CVE-2026-82213 — Nexi XPay Build 7.6.1 - 7.6.2 - Unauthenticated Saved Payment Token Disclosure via IDOR (CVSS 5.3)