CVE-2026-92209
ZDI-26-711: NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability
Published Sep 16, 2026
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92209.
Timeline
Detection, updates, and resolution for this record.
Sep 16, 2026 · Catalog
Detected
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92209.
Sources
- CVE.orgCVE-2026-92209
Official CVE identifier
cve.org - Zero Day InitiativeZDI-26-711
This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-92209.
zerodayinitiative.com