ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI disclosed a CVSS 7.8 named-pipe permission flaw in NoMachine that allows local privilege escalation.
42
Organization
NoMachine
- Mentions · 7d0
- Mentions · 30d2
- All mentions2
- First seenOct 15, 2026
- Last mentioned27d ago
Timeline
2 articles · newest firstZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI disclosed a CVSS 7.8 uncontrolled search path flaw in NoMachine enabling local privilege escalation.
42
Related CVEs
by mentions- Named pipe permission flaw enables local SYSTEM escalation in NoMachine
Appears with
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.