CVE-2026-53694-NoMachine-LPE

CVE-2026-53694: NoMachine Local Privilege Escalation via Argument Injection Overview This repository contains the write-up and Proof of Concept PoC for CVE-2026-53694, a Local Privilege Escalation LPE vulnerability in NoMachine for Linux. Due to improper neutralization of argument delimiters in t...

CVE-2026-92208_remote_mDNS_overflow

CVE-2026-92208 A heap-based buffer overflow vulnerability in the mDNS component of NoMachine allows possibly unauthenticated, network-adjacent attackers to execute arbitrary code in the context of the service account. Note: ZDI holds exclusivity rights over the technical details, so no PoC or...

CVE-2026-92209_NoMachine_LPE

CVE-2026-92209 An improper authentication vulnerability in the Redis component of NoMachine allows local attackers to escalate privileges and execute arbitrary code in the context of the service account. Note: ZDI holds exclusivity rights over the technical details, so no PoC or technical breakdo...

CVE-2026-5054_NoMachine_LPE

NoMachine Local Privilege Escalation CVE-2026-5054 Vulnerability Details CVE ID: CVE-2026-5054 ZDI Advisory: ZDI-26-248 CVSS Score: 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Vendor ID: TR02X11711 Affected Versions: NoMachine = 9.2.18 Tested on Ubuntu 25.10 Fixed Version: NoMachine 9.4.14 Overview A...

CVE-2026-5053_NoMachine_LPE

CVE-2026-5053: NoMachine Arbitrary File Deletion ZDI-26-247 CVE ID: CVE-2026-5053 ZDI Advisory: ZDI-26-247 CVSS Score: 7.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H Affected Products: NoMachine Free and NoMachine Workstation Pack Tested on 9.2.18 Linux/Ubuntu Patched Version: 9.4.14 Tracked as TR02X117...

CVE-2026-114549

NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

CVE-2026-114549

A heap-based buffer overflow exists in the NoMachine nxwebrunner web service, which listens on TCP port 4443 by default. The vulnerability is caused by a lack of proper validation of the length of user-supplied data before it is copied to a heap-based buffer. Remote attackers can exploit this fla...

CVE-2026-114549 NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability

NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web...

NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address (RIP) Control

NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address RIP Control """NoMachine Terminal Server — Pre-Authentication Stack Overflow with Return-Address RIP Control""" from future import annotations from kittysploit import import os import socket import ssl import sys...

NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST

NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST """NoMachine Terminal Server — Pre-Authentication Heap Memory Corruption in parsePOST""" from future import annotations from kittysploit import import socket import ssl import sys import time import re import os...

PT-2026-121737

Name of the Vulnerable Software and Affected Versions NoMachine nxwebrunner affected versions not specified Description A heap-based buffer overflow exists in the web service that listens on TCP port 4443 by default. The issue occurs because the service fails to properly validate the length of...

NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4443 by default. The issue results from the lack of...

CVE-2026-92209

NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2026-92208

NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the...

CVE-2026-92210

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-111184

NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-92210

The NoMachine nxhtd service is vulnerable to a Server-Side Request Forgery (SSRF) and information disclosure vulnerability. The flaw resides in the web service , which listens on UDP port 4443 by default, due to a lack of proper URI validation before accessing resources. A remote attacker can exp...

EUVD-2026-107399

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...