{"items":[{"id":"CVE-2026-114549","published":"2026-11-03T23:46:39.428Z","updated":"2026-11-06T18:54:33.023Z","title":"NoMachine nxwebrunner Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00584,"kevAdded":null},{"id":"CVE-2026-92210","published":"2026-10-21T17:16:22.236Z","updated":"2026-10-30T15:24:58.451Z","title":"NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability","severity":"HIGH","score":7.2,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00327,"kevAdded":null},{"id":"CVE-2026-92209","published":"2026-10-21T17:16:13.249Z","updated":"2026-10-23T11:06:22.907Z","title":"NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00243,"kevAdded":null},{"id":"CVE-2026-92208","published":"2026-10-21T17:16:04.507Z","updated":"2026-10-23T11:06:23.061Z","title":"NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00618,"kevAdded":null},{"id":"CVE-2026-111184","published":"2026-10-21T17:15:43.200Z","updated":"2026-10-23T11:06:23.225Z","title":"NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2026-18264","published":"2026-08-20T16:13:11.390Z","updated":"2026-08-26T19:50:17.572Z","title":"NoMachine getstat Command Injection Remote Code Execution Vulnerability","severity":"HIGH","score":8.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.02269,"kevAdded":null},{"id":"CVE-2026-53694","published":"2026-06-10T14:57:25.508Z","updated":"2026-07-07T15:04:57.042Z","title":"Potential local privileges escalation through argument injection in the nxchmod.sh script","severity":"HIGH","score":7.3,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00134,"kevAdded":null},{"id":"CVE-2026-5055","published":"2026-04-11T00:14:25.877Z","updated":"2026-04-14T03:55:48.016Z","title":"NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00214,"kevAdded":null},{"id":"CVE-2026-5054","published":"2026-04-11T00:14:16.658Z","updated":"2026-04-14T03:55:46.803Z","title":"NoMachine External Control of File Path Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00218,"kevAdded":null},{"id":"CVE-2026-5053","published":"2026-04-11T00:14:07.656Z","updated":"2026-04-13T16:18:43.447Z","title":"NoMachine External Control of File Path Arbitrary File Deletion Vulnerability","severity":"HIGH","score":7.1,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.0015,"kevAdded":null},{"id":"CVE-2025-8614","published":"2025-09-02T19:47:16.828Z","updated":"2025-09-02T20:35:15.670Z","title":"NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00271,"kevAdded":null},{"id":"CVE-2024-7253","published":"2024-11-22T21:30:47.553Z","updated":"2024-11-26T16:30:46.189Z","title":"NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability","severity":"HIGH","score":7.8,"vendor":"NoMachine","product":"NoMachine","kev":false,"epss":0.00349,"kevAdded":null}]}