Skip to content
OpenAdvisories
High WID-SEC-2026-3414 3 CVEs

NoMachine: Mehrere Schwachstellen

Published Sep 16, 2026 · Updated Oct 21, 2026 · Revision 2 · de-DE

Vendor: NoMachine Product: NoMachine Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in NoMachine ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service zu verursachen, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erweitern.

Product

NoMachine ist eine plattformübergreifende Softwareanwendung für Remote-Desktop-Zugriff und -Verwaltung.

Vulnerabilities 3

  • High 8.8
    CVE-2026-92208 Public exploit

    NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

    NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability.…

    NoMachine NoMachine
  • High 7.8
    CVE-2026-92209 Public exploit

    NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

    NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

    NoMachine NoMachine
  • High 7.2
    CVE-2026-92210

    NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

    NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vuln…

    NoMachine NoMachine

Revision history

  1. #2

    Referenz(en) aufgenommen: EUVD-2026-107399, EUVD-2026-107398, EUVD-2026-107397

  2. #1

    Initiale Fassung

References