Nomachine

Don't miss out!

Thousands of developers use stack.watch to stay informed.
Get an email whenever new security vulnerabilities are reported in any Nomachine product.

RSS Feeds for Nomachine security vulnerabilities

Create a CVE RSS feed including security vulnerabilities found in Nomachine products with stack.watch. Just hit watch, then grab your custom RSS feed url.

Products by Nomachine Sorted by Most Security Vulnerabilities since 2018

Nomachine14 vulnerabilities

Nomachine Cloud Server2 vulnerabilities

Nomachine Enterprise Client2 vulnerabilities

Nomachine Enterprise Desktop2 vulnerabilities

Nomachine Server2 vulnerabilities

By the Year

In 2026 there have been 8 vulnerabilities in Nomachine. Nomachine did not have any published security vulnerabilities last year. That is, 8 more vulnerabilities have already been reported in 2026 as compared to last year.

Year	Vulnerabilities	Average Score
2026	8	0.00
2025	0	0.00
2024	1	7.80
2023	1	5.30
2022	1	7.30
2021	8	8.80
2020	0	0.00
2019	0	0.00
2018	3	7.80

It may take a day or so for new Nomachine vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.

Recent Nomachine Security Vulnerabilities

CVE	Date	Vulnerability	Products
CVE-2026-92210	Oct 21, 2026	NoMachine Web Service SSRF (CVE-2026-92210) Allows Remote Request NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability. This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on UDP port 4443 by default. The issue results from the lack of proper validation of a URI prior to accessing resources. An attacker can leverage this vulnerability to initiate requests in the context of the service account. Was ZDI-CAN-31619.	Nomachine
CVE-2026-92209	Oct 21, 2026	NoMachine Redis Improper Auth Local Priv Esc Vulnerability NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the authentication mechanism controlling access to the Redis database. The issue results from using insufficient entropy in the generation of credentials. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-30984.	Nomachine
CVE-2026-92208	Oct 21, 2026	NoMachine mDNS Heap Overflow RCE Vulnerability NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of mDNS resource records. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-30982.	Nomachine
CVE-2026-18264	Aug 20, 2026	NoMachine getstat Web Service RCE via Command Injection NoMachine getstat Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NoMachine. Authentication is required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 4000 by default. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. . Was ZDI-CAN-30634.	Nomachine
CVE-2026-53694	Jun 10, 2026	NoMachine <9.5.7 & <8.23.2: Arg Injection via Improper Delimiter Neutralization Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.	Nomachine
CVE-2026-5055	Apr 11, 2026	NoMachine Device Server LPE via Uncontrolled Search Path Element NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NoMachine Device Server. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-28494.	Nomachine
CVE-2026-5054	Apr 11, 2026	NoMachine External File Path LPE via Unvalidated CmdLine Path NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of command line parameters. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root. Was ZDI-CAN-28630.	Nomachine
CVE-2026-5053	Apr 11, 2026	NoMachine Arbitrary File Deletion via External File Path NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of environment variables. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete files in the context of root. Was ZDI-CAN-28644.	Nomachine
CVE-2024-7253	Nov 22, 2024	NoMachine nxnode.exe Uncontrolled Search Path Element LPE NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within nxnode.exe. The process loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. . Was ZDI-CAN-24039.	Nomachine
CVE-2022-48074	Feb 03, 2023	NoMachine <=8.2.3 RCE via Crafted .nxs File An issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file.	Nomachine
CVE-2022-34043	Jun 29, 2022	Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 Incorrect permissions for the folder C:\ProgramData\NoMachine\var\uninstall of Nomachine v7.9.2 allows attackers to perform a DLL hijacking attack and execute arbitrary code.	Nomachine
CVE-2021-42972	Dec 07, 2021	NoMachine Server is affected by Buffer Overflow NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Server
CVE-2021-42973	Dec 07, 2021	NoMachine Server is affected by Integer Overflow NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Server
CVE-2021-42976	Dec 07, 2021	NoMachine Enterprise Desktop is affected by Buffer Overflow NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Enterprise Desktop
CVE-2021-42977	Dec 07, 2021	NoMachine Enterprise Desktop is affected by Integer Overflow NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Enterprise Desktop
CVE-2021-42979	Dec 07, 2021	NoMachine Cloud Server is affected by Integer Overflow NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Cloud Server
CVE-2021-42980	Dec 07, 2021	NoMachine Cloud Server is affected by Buffer Overflow NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Cloud Server
CVE-2021-42983	Dec 07, 2021	NoMachine Enterprise Client is affected by Buffer Overflow NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Enterprise Client
CVE-2021-42986	Dec 07, 2021	NoMachine Enterprise Client is affected by Integer Overflow NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.	Enterprise Client
CVE-2018-17980	Oct 15, 2018	NoMachine before 5.3.27 and 6.x before 6.3.6 NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current working directory, and the Trojan horse code is executed. (The directory could, in general, be on a local filesystem or a network share.).	Nomachine
CVE-2018-0664	Sep 04, 2018	A vulnerability in NoMachine App for Android 5.0.63 and earlier A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors.	Nomachine
CVE-2018-6947	Feb 28, 2018	An uninitialised stack variable in the nxfuse component An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged user to gain elevation of privileges on Windows 7 (32 and 64bit), and denial of service for Windows 8 and 10.	Nomachine