File Disclosure Vulnerability in Eyelock's Nano NXT Device

www.exploit-db.com

File Disclosure Vulnerability in Eyelock's Nano NXT Device

First seen 21 Oct 2026, 01:17 UTC •30.8

Article Content

1 / 3

Browse articles

ThreatCluster •October 21, 2026 at 02:20 UTC

•Nano NXT devices are vulnerable to file disclosure due to improper input validation.
•The vulnerability affects several firmware versions and allows access to local files.
•A patch has been released to mitigate the issue, but no active exploitation has been confirmed.

Eyelock's Nano NXT device, an iris-based identity authentication system, has been found to have a file disclosure vulnerability. This flaw arises from improper validation of input passed through the 'path' parameter in the 'logdownload.php' script, allowing attackers to access local files. The vulnerability affects multiple firmware versions, including 3.05.1193, 3.04.1108, and 3.03.944. The vendor has confirmed the issue and is scheduled to release a patch. The latest firmware, version 3.06.1260, has been released to address these vulnerabilities. No has been reported as of the articles' publication date.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-21

Vulnerability disclosed

Eyelock confirmed a file disclosure vulnerability in the Nano NXT device affecting multiple firmware versions.

2026-10-21

Patch released

Eyelock released NXT Firmware version 3.06.1260 to address the disclosed vulnerabilities.

More articles in this cluster (2)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Weakness (2)

CWE-200 - Exposure of Sensitive Information
CWE-22 - Path Traversal

Affected Platform (4)

GNU/Linux
Lighttpd
PHP
SQLite

Relationships

Data Breach targets GNU/Linux
Data Breach targets Lighttpd
Data Breach targets PHP
Data Breach targets SQLite
Data Breach related to CWE-200 - Exposure of Sensitive Information
Data Breach related to CWE-22 - Path Traversal

Common questions

Which firmware versions are affected?

Firmware versions 3.05.1193, 3.04.1108, and 3.03.944 are affected by the vulnerability.

Has this vulnerability been exploited in the wild?

No active exploitation has been reported as of the articles' publication date.

What should users do to protect their systems?

Users should update to the latest firmware version 3.06.1260 to mitigate the vulnerability.

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…