ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
ZDI disclosed CVE-2026-92209, an improper authentication flaw in NoMachine's bundled Redis component allowing local privilege escalation (CVSS 7.8).
25
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 11, 2026
- Last mentionedSep 16, 2026
Timeline
4 articles · newest firstHackers Turn More Than 3,500 Redis Servers Into Cryptocurrency Miners
Hunters.io researchers report 3,562 exposed Redis servers hijacked via replication abuse into Monero cryptomining, causing performance loss and data-integrity risk.
50
Massive Redis Cryptojacking Campaign Hijacks Thousands of Linux Servers
RedisRaider cryptojacking campaign compromises thousands of exposed, unauthenticated Linux Redis servers using cron persistence to deploy XMRig Monero miners.
60
A Three-Layer Caching Architecture for Low-Latency LLM Web Search on Commodity CPU Hardware
OreoLook's three-layer Redis caching architecture cuts redundant LLM calls and embedding work for CPU-hosted web-search answer generation.
34
Related CVEs
by mentions- Local privilege escalation via NoMachine Redis authentication
- CVE-2026-81934<1%7.5Use-After-Free in Redis TLS Pending-Data Handling Enables Unauthenticated RCE
Appears with
- XMRigproduct · 2
- Redisvendor · 2
- XMRigmalware · 2
- Elasticvendor · 1
- Zero Day Initiativeorganization · 1
- Zero Day Initiativevendor · 1
- NoMachinevendor · 1
- XMRigvendor · 1
- Hunt.iovendor · 1
- Hunters.ioorganization · 1
- RedisRaiderthreat actor · 1
- Intelvendor · 1
- Elasticorganization · 1
- lixSearchproduct · 1
- OreoLookproduct · 1
- NoMachineproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.