Skip to content
OpenAdvisories
Medium WID-SEC-2026-0927 3 CVEs

NoMachine: Mehrere Schwachstellen

Published Mar 30, 2026 · Updated Sep 28, 2026 · Revision 3 · de-DE

Vendor: NoMachine Product: NoMachine Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in NoMachine ausnutzen, um Dateien zu manipulieren, und um seine Privilegien zu erhöhen.

Product

NoMachine ist eine plattformübergreifende Softwareanwendung für Remote-Desktop-Zugriff und -Verwaltung.

Vulnerabilities 3

  • High 7.8
    CVE-2026-5054 Public exploit

    NoMachine External Control of File Path Local Privilege Escalation Vulnerability

    NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

    NoMachine NoMachine
  • High 7.8
    CVE-2026-5055

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged c…

    NoMachine NoMachine
  • High 7.1
    CVE-2026-5053 Public exploit

    NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

    NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

    NoMachine NoMachine

Revision history

  1. #3

    Referenz(en) aufgenommen: ZDI-26-248, ZDI-CAN-28630

  2. #2

    Referenz(en) aufgenommen: EUVD-2026-21654, EUVD-2026-21653, EUVD-2026-21651

  3. #1

    Initiale Fassung

References