CVE-2026-92209High· 7.8▾ Abyssal0dayPoC availableNoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execu…
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 42.9 · likelihood 0 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
1 GitHub repo (last check)
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the authentication mechanism controlling access to the Redis database. The issue results from using insufficient entropy in the generation of credentials. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-30984.
NoMachine 9.7.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-92208High· 8.8NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2026-111184High· 7.8NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
CVE-2026-92210High· 7.2NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability
CVE-2026-112041Low· 3.7diem-project diem dmString.php random weak prng
CVE-2026-90562High· 8.1LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint
CVE-2026-53939Critical· 9.1OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE)