Narkom Pyxis Signage Unrestricted File Upload Vulnerability Allowing ACL Bypass

A vulnerability allowing unrestricted upload of files with dangerous types has been identified in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage, affecting versions through 31012025. This vulnerability allows access to functionalities that are not properly constrained by Access Control Lists (ACLs).

Impact

Exploitation of this vulnerability could lead to unauthorized access to functionalities, bypassing established access controls.

Remediation

Users and system administrators are advised to upgrade to the version released on or after 30 January 2025.