Nomachine develops a focused suite of remote-access and desktop-virtualization products—including its core Nomachine platform, Cloud Server, and Enterprise Client/Desktop offerings—that enable secure connectivity to graphical computing environments across distributed deployments. While the vendor maintains a narrow product footprint, its remote-access role places it among more prominent targets in the vulnerability landscape, and vulnerabilities affecting these products frequently acquire public exploit code. The exposure recurs through memory-safety and path-handling weakness classes including classic buffer overflows, integer overflows, uncontrolled search-path elements, and external file-path control, reflecting the complexity of implementing secure remote-access protocols and desktop-streaming codecs. Defenders should monitor this vendor's advisories for remote-access infrastructure and apply patches promptly given the attractiveness of these products to lateral-movement and persistence tactics; live severity, exploitation activity, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nomachine over time
Signals from CVEs in this vendor scope (26 CVEs).
26 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-17980HIGH NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated | Oct 15, 2018 | 7.8 | 37 | NO | YES |
CVE-2018-6947HIGH An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with NoMachine 6.0.66_2 and earlier allows a local low privileged us | Feb 28, 2018 | 7.8 | 37 | NO | YES |
CVE-2017-12763HIGH An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files. | Aug 29, 2017 | 8.8 | 37 | NO | YES |
CVE-2018-0664CRITICAL A vulnerability in NoMachine App for Android 5.0.63 and earlier allows attackers to alter environment variables via unspecified vectors. | Sep 4, 2018 | 9.8 | 31 | NO | NO |
CVE-2026-53694HIGH Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, | Jun 10, 2026 | 7.3 | 28 | NO | NO |
CVE-2026-5055HIGH NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of N | Apr 11, 2026 | 7.8 | 27 | NO | NO |
CVE-2026-5054HIGH NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMa | Apr 11, 2026 | 7.8 | 27 | NO | NO |
CVE-2021-42986HIGH NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execut | Dec 7, 2021 | 8.8 | 26 | NO | NO |
CVE-2021-42983HIGH NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute | Dec 7, 2021 | 8.8 | 26 | NO | NO |
CVE-2021-42980HIGH NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary | Dec 7, 2021 | 8.8 | 26 | NO | NO |
Signals from CVEs in this vendor scope (26 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nomachine.
Media articles that mention a CVE ID that affects a product developed by Nomachine — matched by CVE ID, not by vendor name.