CVE-2025-27926

Nintex / Automation PUBLISHED

Description (CNA)

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users.

Affected (CNA)

Vendor / product	Versions
Nintex / Automation	affected 5.6 before 5.8

CWE

CWE-276

References

https://help.nintex.com/en-US/platform/ReleaseNotes/K2Five.htm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.