ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
ZDI disclosed CVE-2026-92209, an improper authentication flaw in NoMachine's bundled Redis component allowing local privilege escalation (CVSS 7.8).
ZDI published advisory ZDI-26-711 describing an improper authentication vulnerability in the Redis component bundled with NoMachine, tracked as CVE-2026-92209 with CVSS 7.8. A local attacker who can already execute low-privileged code on the target system can escalate privileges. No in-the-wild exploitation or patch details are mentioned in the advisory.
25