NoMachine

Products

ProductCVEsExploitedLatest
NoMachine12–Nov 3, 2026

Exploited and recent CVEs

  • CVE-2026-114549 Critical 9.8 NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.6%
  • CVE-2026-92210 High 7.2 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability 0.3%
  • CVE-2026-92209 High 7.8 NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability 0.2%
  • CVE-2026-92208 High 8.8 NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability 0.6%
  • CVE-2026-111184 High 7.8 NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability 0.1%
  • CVE-2026-18264 High 8.8 NoMachine getstat Command Injection Remote Code Execution Vulnerability 2.3%
  • CVE-2026-53694 High 7.3 Potential local privileges escalation through argument injection in the nxchmod.sh script 0.1%
  • CVE-2026-5055 High 7.8 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 0.2%
  • CVE-2026-5054 High 7.8 NoMachine External Control of File Path Local Privilege Escalation Vulnerability 0.2%
  • CVE-2026-5053 High 7.1 NoMachine External Control of File Path Arbitrary File Deletion Vulnerability 0.1%
  • CVE-2025-8614 High 7.8 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 0.3%
  • CVE-2024-7253 High 7.8 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability 0.3%