Read the docs

Network Optix

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Network Optix records in CISA KEV

No Network Optix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nxcloud 1 record LOW

Records

3 records

TI-2026-54524 CVE-2026-78414 · GHSA-237w-25vx-r57c

Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name

Priority LOW 37

Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00338 Published 2026-08-24 Fixed in 6.1.3 CWE-79
TI-2023-05751 CVE-2023-6263 · GHSA-xh6m-2h5x-55mh

Server Spoofing Vulnerability in NxCloud

Priority LOW 37

An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00489 Published 2023-11-22 Fixed in 23.1.0.40440 CWE-290
TI-2026-08813 CVE-2026-10056 · GHSA-r863-5pgm-c8g4

CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request

Priority LOW 34

CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unauthenticated remote attacker to steal the…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00242 Published 2026-05-29 Fixed in 6.1.2 CWE-942
Open these records in search →