Nexi XPay Build

Nexi XPay Build has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; none of them are fixed as of October 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10. 2026 was the busiest year with 3 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (33%). Other recurring categories include Client-Side Enforcement Of Server-Side Security, Missing Authorization.

None of the 3 issues recorded for Nexi XPay Build have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

3 independent researchers contributed these findings, one record each.