Network Optix

Products

ProductCVEsExploitedLatest
Nx Witness VMS2–Aug 24, 2026
NxCloud1–Nov 22, 2023

Exploited and recent CVEs

  • CVE-2026-78414 High 8.0 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name 0.3%
  • CVE-2026-10056 High 7.5 CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request 0.2%
  • CVE-2023-6263 High 8.3 Server Spoofing Vulnerability in NxCloud 0.5%