Read the docs

NSClient++

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

NSClient++ records in CISA KEV

No NSClient++ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority HIGH 68

An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.01695 Published 2025-07-02 No fix listed CWE-306
Priority LOW 35

Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a malicious program.exe executable in the %S…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00773 Published 2018-01-31 No fix listed CWE-428
Open these records in search →