TI-2026-84863 CVE-2026-114549 · GHSA-5x33-389c-c5hr
Heap overflow in NoMachine web service allows remote code execution
Priority MEDIUM 50
NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability.
Vulnerabilities
32 records
TI-2026-78900 CVE-2026-92210 · GHSA-q2x4-8x2v-f9cr
Server-side request forgery in NoMachine nxhtd web service
Priority LOW 38
NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability.
TI-2026-78899 CVE-2026-92209 · GHSA-g7q4-gvgr-3xv5
Weak credentials in NoMachine Redis allow local privilege escalation
Priority LOW 36
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability.
TI-2026-78898 CVE-2026-92208 · GHSA-64r7-8gpp-2vpj
Heap overflow in NoMachine mDNS parsing enables remote code execution
Priority MEDIUM 41
NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability.
TI-2026-78902 CVE-2026-111184 · GHSA-555x-8g98-cxm4
NoMachine named pipe permissions allow local privilege escalation
Priority LOW 35
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability.
TI-2026-15017 CVE-2026-18264 · GHSA-wx22-7c2v-g5hw
OS command injection in NoMachine
Priority MEDIUM 44
NoMachine getstat Command Injection Remote Code Execution Vulnerability.
TI-2026-38722 CVE-2026-53694 · GHSA-pph3-cx78-q9jc
Potential local privileges escalation through argument injection in the nxchmod.sh script
Priority LOW 33
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.
TI-2026-04410 CVE-2026-5055 · GHSA-cfcr-ph9h-pgwq
Uncontrolled search path in NoMachine
Priority LOW 35
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
TI-2026-04409 CVE-2026-5054 · GHSA-4399-fg4g-454c
NoMachine External Control of File Path Local Privilege Escalation Vulnerability
Priority LOW 35
NoMachine External Control of File Path Local Privilege Escalation Vulnerability.
TI-2026-04408 CVE-2026-5053 · GHSA-75gg-gxqp-fq44
NoMachine External Control of File Path Arbitrary File Deletion Vulnerability
Priority LOW 30
NoMachine External Control of File Path Arbitrary File Deletion Vulnerability.
TI-2025-07885 CVE-2025-8614 · GHSA-42h4-gm3v-w2c4
Uncontrolled search path in NoMachine
Priority LOW 36
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
TI-2024-06718 CVE-2024-7253 · GHSA-h285-56q5-4xv2
Uncontrolled search path in NoMachine
Priority LOW 36
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability.
TI-2023-20294 CVE-2023-39107 · GHSA-wmw3-mpr6-r79j
An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client…
Priority HIGH 80
An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for macOS before v8.8.1 allows attackers to overwrite root-owned files by using hardlinks.
TI-2022-23798 CVE-2022-48074 · GHSA-65c7-3crf-8q93
An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file.
Priority LOW 24
An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file.
TI-2022-15018 CVE-2022-34043 · GHSA-8h8j-c543-w37v
Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine…
Priority LOW 32
Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code.
TI-2021-12845 CVE-2021-33436 · GHSA-669x-j2pw-grf8
NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege…
Priority LOW 32
NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading.
TI-2021-19066 CVE-2021-42986 · GHSA-c54h-j86w-wmh6
NoMachine Enterprise Client is affected by Integer Overflow.
Priority LOW 39
NoMachine Enterprise Client is affected by Integer Overflow.
TI-2021-19065 CVE-2021-42983 · GHSA-m87v-c4qx-cmpc
NoMachine Enterprise Client is affected by Buffer Overflow.
Priority LOW 39
NoMachine Enterprise Client is affected by Buffer Overflow.
TI-2021-19064 CVE-2021-42980 · GHSA-v838-9cq8-hrhc
NoMachine Cloud Server is affected by Buffer Overflow.
Priority LOW 39
NoMachine Cloud Server is affected by Buffer Overflow.
TI-2021-19063 CVE-2021-42979 · GHSA-27vq-c7q6-wxpx
NoMachine Cloud Server is affected by Integer Overflow.
Priority LOW 39
NoMachine Cloud Server is affected by Integer Overflow.
TI-2021-19062 CVE-2021-42977 · GHSA-9cjc-8427-pcw9
NoMachine Enterprise Desktop is affected by Integer Overflow.
Priority LOW 39
NoMachine Enterprise Desktop is affected by Integer Overflow.
TI-2021-19061 CVE-2021-42976 · GHSA-3724-4mmc-j59x
NoMachine Enterprise Desktop is affected by Buffer Overflow.
Priority LOW 39
NoMachine Enterprise Desktop is affected by Buffer Overflow.
TI-2021-19060 CVE-2021-42973 · GHSA-mrjh-hc9f-vfff
NoMachine Server is affected by Integer Overflow.
Priority LOW 39
NoMachine Server is affected by Integer Overflow.
TI-2021-19059 CVE-2021-42972 · GHSA-hj35-99wc-7f3m
NoMachine Server is affected by Buffer Overflow.
Priority LOW 39
NoMachine Server is affected by Buffer Overflow.
TI-2018-14207 CVE-2018-20029 · GHSA-m82p-6h3c-55p3
The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10…
Priority LOW 25
The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows local users to cause a denial of service (BSOD) because uninitialized memory can be read.