{"id":"CVE-2026-53694","title":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.","summary":"Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.","severity":"none","cwe":["CWE-88"],"published":"2026-06-10","updated":"2026-07-07","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-53694","references":[{"url":"https://kb.nomachine.com/SU05X00274","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8"},{"url":"https://kb.nomachine.com/SU05X00275","label":"5a6e4751-2f3f-4070-9419-94fb35b644e8"}],"tags":["nvd","exploit-available"],"epss":0.00134,"epssPercentile":0.03265,"ingestedAt":"2026-07-07T16:25:59.281Z","exploits":{"github":1,"githubRepos":["https://github.com/do4choo/CVE-2026-53694-NoMachine-LPE"],"checkedAt":"2026-09-23T07:14:15.119Z"},"exploitAvailable":true,"slug":"CVE-2026-53694","body":"## Overview\n\nImproper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":15,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":5326,"id":"CVE-2026-53694","ts":1788887266271,"field":"exploit_available","old":"false","new":"true"},{"seq":4209,"id":"CVE-2026-53694","ts":1788886380947,"field":"exploit_available","old":"true","new":"false"},{"seq":2968,"id":"CVE-2026-53694","ts":1788883045844,"field":"exploit_available","old":"false","new":"true"},{"seq":1997,"id":"CVE-2026-53694","ts":1788882450086,"field":"exploit_available","old":"true","new":"false"},{"seq":1073,"id":"CVE-2026-53694","ts":1788881886321,"field":"exploit_available","old":"false","new":"true"}]}