Skip to content
OpenAdvisories

Vendor

NSClient++

2 known vulnerabilities.

Products

NSClient++ 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-34079 Public exploit

    NSClient++ Authenticated Remote Code Execution via ExternalScripts API

    An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the administrator password can authenticate to the web interface (default port 844…

    NSClient++ NSClient++
  • High 7.3
    CVE-2025-34078 Public exploit

    NSClient++ 0.5.2.35 Local Privilege Escalation via ExternalScripts and Web Interface

    A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts features are enabled. The configuration file (nsclient.ini) stores the administrative password in plaintext and is readable by local users…

    NSClient++ NSClient++