CVE-2026-5055

OVERVIEW CVE-2026-5055 is an uncontrolled search path element vulnerability affecting NoMachine's Device Server component. The flaw allows local attackers with low-privilege code execution capabilities to escalate their privileges by exploiting an insecure library loading mechanism, ultimately achieving SYSTEM-level access and arbitrary code execution on vulnerable systems. SEVERITY This vulnerability carries a CVSS 3.0 score of 7.8 (HIGH), reflecting a local attack vector with low complexity and no user interaction required. The attack requires prior low-privilege code execution on the target system. Successfully exploiting this flaw grants the attacker complete system compromise with high confidentiality, integrity, and availability impact through SYSTEM-level code execution capabilities. EXPLOITATION STATUS There is currently no evidence of active exploitation in the wild. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog, and community attention remains minimal as indicated by its inactive Hot List status. The EPSS score of 0.00016 suggests substantially lower exploitation probability compared to the CVE baseline, indicating this remains a theoretical risk at present with no publicly available proof-of-concept exploit actively circulating.