Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

NoMachine — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting NoMachine. AI-powered Chinese analysis, POCs, and references for each vulnerability.

NoMachine provides remote desktop access solutions, enabling users to connect to and control remote systems. Historically, the software has been susceptible to multiple remote code execution vulnerabilities, often stemming from improper input validation and boundary errors in its protocol handling. Privilege escalation flaws have also been documented, allowing unauthorized users to gain elevated system access. While no major public security incidents have been widely reported, the presence of five CVEs indicates ongoing security challenges. The application's network-facing components and complex protocol implementation have made it a target for exploitation, necessitating regular updates and careful deployment in security-sensitive environments.

Found 11 results / 11 Clear Filters
Top products by NoMachine: NoMachine
CVE ID Title CVSS Severity Published
CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability — NoMachine CWE-918 - - 2026-10-21
CVE-2026-92209 NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability — NoMachine CWE-331 - - 2026-10-21
CVE-2026-92208 NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability — NoMachine CWE-122 - - 2026-10-21
CVE-2026-111184 NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability — NoMachine CWE-732 - - 2026-10-21
CVE-2026-18264 NoMachine getstat Command Injection Remote Code Execution Vulnerability — NoMachine CWE-78 - - 2026-08-20
CVE-2026-53694 Potential local privileges escalation through argument injection in the nxchmod.sh script — NoMachine CWE-88 - - 2026-06-10
CVE-2026-5055 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability — NoMachine CWE-427 7.8AI High AI 2026-04-11
CVE-2026-5054 NoMachine External Control of File Path Local Privilege Escalation Vulnerability — NoMachine CWE-73 7.8AI High AI 2026-04-11
CVE-2026-5053 NoMachine External Control of File Path Arbitrary File Deletion Vulnerability — NoMachine CWE-73 7.1AI High AI 2026-04-11
CVE-2025-8614 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability — NoMachine CWE-427 7.8 - 2025-09-02
CVE-2024-7253 NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability — NoMachine CWE-427 7.8 - 2024-11-22

This page lists every published CVE security advisory associated with NoMachine. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.