Skip to content
OpenAdvisories

Vendor

NoMachine

12 known vulnerabilities.

NoMachine at a glance

Last 12 months
10
Critical · all time
1
Exploited · all time
0
Public exploit · all time
5
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 3 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 0 vulnerabilities August 2026: 1 vulnerability September 2026: 0 vulnerabilities Sep October 2026: 4 vulnerabilities November 2026: 1 vulnerability, 1 critical
Show as table
MonthVulnerabilitiesCritical
Nov 202611
Oct 202640
Sep 202600
Aug 202610
Jul 202600
Jun 202610
May 202600
Apr 202630
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202510
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

NoMachine 12

Latest advisories

  • High max 9.8
    WID-SEC-2026-4174 1 CVE rev. 2

    NoMachine: Schwachstelle ermöglicht Codeausführung

    Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NoMachine ausnutzen, um beliebigen Programmcode auszuführen.

    NoMachine Linux Windows
    first Oct 26, 2026
  • High max 8.8
    WID-SEC-2026-3414 3 CVEs rev. 2

    NoMachine: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in NoMachine ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service zu verursachen, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erweitern.

    NoMachine Linux Windows
    first Sep 16, 2026
  • Medium max 7.8
    WID-SEC-2026-4014 1 CVE rev. 2

    NoMachine: Mehrere Schwachstellen ermöglichen Privilegieneskalation

    Ein lokaler Angreifer kann mehrere Schwachstellen in NoMachine ausnutzen, um seine Privilegien zu erhöhen.

    NoMachine Linux Windows
    first Oct 18, 2026
  • High max 7.3
    WID-SEC-2026-1891 1 CVE rev. 2

    NoMachine: Schwachstelle ermöglicht Codeausführung und Privilegieneskalation

    Ein lokaler Angreifer kann eine Schwachstelle in NoMachine ausnutzen, um möglicherweise beliebigen Code auszuführen, Daten offenzulegen oder zu verändern oder andere, nicht näher genannte Auswirkungen zu erreichen. Eine Privilegieneskalation auf root ist eben…

    NoMachine Windows
    first Jun 10, 2026
  • Medium max 7.8
    WID-SEC-2026-0927 3 CVEs rev. 3

    NoMachine: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in NoMachine ausnutzen, um Dateien zu manipulieren, und um seine Privilegien zu erhöhen.

    NoMachine Linux Windows
    first Mar 30, 2026
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Critical 9.8
    CVE-2026-114549

    NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability

    NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. Th…

    NoMachine NoMachine
  • High 7.2
    CVE-2026-92210

    NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

    NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vuln…

    NoMachine NoMachine
  • High 7.8
    CVE-2026-92209 Public exploit

    NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

    NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

    NoMachine NoMachine
  • High 8.8
    CVE-2026-92208 Public exploit

    NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

    NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability.…

    NoMachine NoMachine
  • High 7.8
    CVE-2026-111184

    NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

    NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-pr…

    NoMachine NoMachine
  • High 8.8
    CVE-2026-18264

    NoMachine getstat Command Injection Remote Code Execution Vulnerability

    NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is required to exploit this vulnerability. The specific flaw e…

    NoMachine NoMachine
  • High 7.3
    CVE-2026-53694 Public exploit

    Potential local privileges escalation through argument injection in the nxchmod.sh script

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.

    NoMachine NoMachine
  • High 7.8
    CVE-2026-5055

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged c…

    NoMachine NoMachine
  • High 7.8
    CVE-2026-5054 Public exploit

    NoMachine External Control of File Path Local Privilege Escalation Vulnerability

    NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

    NoMachine NoMachine
  • High 7.1
    CVE-2026-5053 Public exploit

    NoMachine External Control of File Path Arbitrary File Deletion Vulnerability

    NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code…

    NoMachine NoMachine
  • High 7.8
    CVE-2025-8614

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged c…

    NoMachine NoMachine
  • High 7.8
    CVE-2024-7253

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

    NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged c…

    NoMachine NoMachine