Nomachine vulnerabilities

Products

• Nomachine 21
• Enterprise Client 3
• Cloud Server 2
• Enterprise Desktop 2
• Nx Server 2
• Server 2

Newest

• nomachine NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-114549 9.8 CriticalNovember 3, 2026
• nomachine NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability CVE-2026-92210 7.2 HighOctober 21, 2026
• nomachine NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability CVE-2026-92209 Public exploit 7.8 HighOctober 21, 2026
• nomachine NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability CVE-2026-92208 Public exploit 8.8 HighOctober 21, 2026
• nomachine NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability CVE-2026-111184 7.8 HighOctober 21, 2026
• nomachine NoMachine getstat Command Injection Remote Code Execution Vulnerability CVE-2026-18264 8.8 HighAugust 20, 2026
• nomachine Potential local privileges escalation through argument injection in the nxchmod.sh script CVE-2026-53694 Public exploit 7.3 HighJune 10, 2026
• nomachine NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CVE-2026-5055 7.8 HighApril 11, 2026
• nomachine NoMachine External Control of File Path Local Privilege Escalation Vulnerability CVE-2026-5054 Public exploit 7.8 HighApril 11, 2026
• nomachine NoMachine External Control of File Path Arbitrary File Deletion Vulnerability CVE-2026-5053 Public exploit 7.1 HighApril 11, 2026
• nomachine NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CVE-2025-8614 7.8 HighSeptember 2, 2025
• nomachine NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability CVE-2024-7253 7.8 HighNovember 22, 2024
• nomachine enterprise client, free edition, nomachine +2 more An arbitrary file overwrite vulnerability in NoMachine Free Edition and Enterprise Client for... CVE-2023-39107 9.1 CriticalAugust 4, 2023
• nomachine An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted ... CVE-2022-48074 5.3 MediumFebruary 3, 2023
• nomachine Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2... CVE-2022-34043 7.3 HighJune 29, 2022
• nomachine NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation... CVE-2021-33436 7.3 HighApril 28, 2022
• nomachine enterprise client NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the... CVE-2021-42986 8.8 HighDecember 7, 2021
• nomachine enterprise client NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the... CVE-2021-42983 8.8 HighDecember 7, 2021
• nomachine cloud server NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine... CVE-2021-42980 8.8 HighDecember 7, 2021
• nomachine cloud server NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine... CVE-2021-42979 8.8 HighDecember 7, 2021
• nomachine enterprise desktop NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the... CVE-2021-42977 8.8 HighDecember 7, 2021
• nomachine enterprise desktop NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the... CVE-2021-42976 8.8 HighDecember 7, 2021
• nomachine server NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server... CVE-2021-42973 8.8 HighDecember 7, 2021
• nomachine server NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server... CVE-2021-42972 8.8 HighDecember 7, 2021
• nomachine, dokan-dev dokany +1 more The nxfs.sys driver in the DokanFS library 0.6.0 in NoMachine before 6.4.6 on Windows 10 allows... CVE-2018-20029 5.5 MediumDecember 10, 2018
• nomachine NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan... CVE-2018-17980 Public exploit 7.8 HighOctober 15, 2018
• nomachine, nomachine s.a r.l. app for android +1 more A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter... CVE-2018-0664 9.8 CriticalSeptember 4, 2018
• microsoft windows 7, windows 8, nomachine +1 more +3 more An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS... CVE-2018-6947 Public exploit 7.8 HighFebruary 28, 2018
• nomachine An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows... CVE-2017-12763 Public exploit 8.8 HighAugust 29, 2017
• nomachine nx web companion nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the... CVE-2012-5003 6.8 MediumSeptember 19, 2012
• nomachine nx node, nx server +1 more Unspecified vulnerability in nxconfigure.sh in NoMachine NX Node 3.x before 3.5.0-4 and NX Server... CVE-2011-3977 7.2 HighOctober 4, 2011
• nomachine nx server nxconfigure.sh in NoMachine NX Server before 2.1.0-18 does not validate the invoking user, which... CVE-2007-0625 4.9 MediumJanuary 31, 2007