Skip to content
NNoMachine
Products
| Product | CVEs | Exploited | Latest |
| NoMachine | 12 | – | Nov 3, 2026 |
Exploited and recent CVEs
-
CVE-2026-114549
Critical 9.8
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability
0.6%
-
CVE-2026-92210
High 7.2
NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability
0.3%
-
CVE-2026-92209
High 7.8
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
0.2%
-
CVE-2026-92208
High 8.8
NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
0.6%
-
CVE-2026-111184
High 7.8
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
0.1%
-
CVE-2026-18264
High 8.8
NoMachine getstat Command Injection Remote Code Execution Vulnerability
2.3%
-
CVE-2026-53694
High 7.3
Potential local privileges escalation through argument injection in the nxchmod.sh script
0.1%
-
CVE-2026-5055
High 7.8
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
0.2%
-
CVE-2026-5054
High 7.8
NoMachine External Control of File Path Local Privilege Escalation Vulnerability
0.2%
-
CVE-2026-5053
High 7.1
NoMachine External Control of File Path Arbitrary File Deletion Vulnerability
0.1%
-
CVE-2025-8614
High 7.8
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
0.3%
-
CVE-2024-7253
High 7.8
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
0.3%