Výsledky hledání

výrobce: NoMachine× typ: zranitelnost× v celém archivu zrušit filtry

3 karet z 3 položek CZ · EN/orig

16. 9. 2026 3

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92208.

CVSS 8.8 CVE-2026-92208 NoMachine US

tg: zranitelnost

16. 9. 07:00 · Zero Day Initiative · ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92209.

CVSS 7.8 CVE-2026-92209 NoMachine US

tg: zranitelnost

16. 9. 07:00 · Zero Day Initiative · ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability

ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2026-92210.

CVSS 7.2 CVE-2026-92210 NoMachine US

tg: zranitelnost

16. 9. 07:00 · Zero Day Initiative · ZDI-26-712: NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability