#nomachine

0 stories this week · 3 this month · 6 in 6 months · mostly security

Stories per day · 30 days

3 RSS

3 stories, newest first · one card per story

ZDI Published Advisories20d agohigh

NoMachine nxwebrunner heap overflow allows unauthenticated RCE

ZDI rates CVE-2026-114549 at CVSS 9.8; the snippet names no versions and no confirmed attacks.

nomachine nxwebrunner

ZDI Published Advisories27d ago

ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI disclosed a CVSS 7.8 named-pipe permission flaw in NoMachine that allows local privilege escalation.

2 sources nomachine privilege-escalation

ZDI Published AdvisoriesSep 16, 2026high

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI disclosed CVE-2026-92208, an unauthenticated heap-based buffer overflow in NoMachine's mDNS service enabling network-adjacent remote code execution (CVSS 8.8).

11 sources heap-overflow mdns

Stories tagged #nomachine

NoMachine nxwebrunner heap overflow allows unauthenticated RCE

ZDI-26-773: NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability