CVE-2025-27926

Description

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by unauthorized users.

Affected Platforms

Weakness Type

CWE-276, CWE-522

References

• https://help.nintex.com/en-US/platform/ReleaseNotes/K2Five.htm