Network Optix Nx Witness VMS

• CVE-2026-78414 High 8.0 Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name 0.3%
• CVE-2026-10056 High 7.5 CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request 0.2%