CVE-2026-92210 NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-92210

The NoMachine nxhtd service is vulnerable to a Server-Side Request Forgery (SSRF) and information disclosure vulnerability. The flaw resides in the web service , which listens on UDP port 4443 by default, due to a lack of proper URI validation before accessing resources. A remote attacker can exp...

PT-2026-94130

Name of the Vulnerable Software and Affected Versions NoMachine nxhtd affected versions not specified Description A Server-Side Request Forgery SSRF flaw exists in the web service that listens on UDP port 4443 by default. The issue is caused by insufficient validation of a URI before accessing...

NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on UDP port 4443 by default. The issue results...