ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability
ZDI disclosed a CVSS 7.8 named-pipe permission flaw in NoMachine that allows local privilege escalation.
42
Product
NoMachine
- Mentions · 7d0
- Mentions · 30d2
- All mentions4
- First seenSep 16, 2026
- Last mentioned27d ago
Timeline
4 articles · newest firstZDI-26-774: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
ZDI disclosed a CVSS 7.8 uncontrolled search path flaw in NoMachine enabling local privilege escalation.
42
ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI disclosed CVE-2026-92208, an unauthenticated heap-based buffer overflow in NoMachine's mDNS service enabling network-adjacent remote code execution (CVSS 8.8).
40
ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
ZDI disclosed CVE-2026-92209, an improper authentication flaw in NoMachine's bundled Redis component allowing local privilege escalation (CVSS 7.8).
25
Related CVEs
by mentions- Heap buffer overflow RCE in NoMachine mDNS parsing
- Named pipe permission flaw enables local SYSTEM escalation in NoMachine
- Local privilege escalation via NoMachine Redis authentication
Appears with
- NoMachinevendor · 4
- Zero Day Initiativeorganization · 2
- Zero Day Initiativevendor · 2
- NoMachineorganization · 2
- Redisproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.