ZeroDay Findings
Sign inSign up

Findings

CVE-2026-92208

ZDI-26-710: NoMachine mDNS Heap-based Buffer Overflow Remote Code Execution Vulnerability

Published Sep 16, 2026

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92208.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 16, 2026 · Catalog

    Detected

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92208.

Sources

  • CVE.orgCVE-2026-92208

    Official CVE identifier

    cve.org
  • Zero Day InitiativeZDI-26-710

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NoMachine. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2026-92208.

    zerodayinitiative.com