NoMachine has 4 CVEs on record. 4 were published in the last 90 days. The busiest recent month was October 2026 with 4. The median CVSS is 7.8 (high).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Worst active — by depth score
CVE-2026-92208High· 8.8NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability74CVE-2026-92209High· 7.8NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability68CVE-2026-111184High· 7.8NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability68CVE-2026-92210High· 7.2NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability65
NoMachine vulnerabilities
CVEs affecting NoMachine, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-92208High· 8.80dayPoCNoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to explo…
CVE-2026-111184High· 7.80dayNoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the abi…
CVE-2026-92210High· 7.20dayNoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability
NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not require…
CVE-2026-92209High· 7.80dayPoCNoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execu…