NSClient is a lightweight monitoring and alerting agent designed for Windows systems integration with enterprise monitoring platforms, with its vulnerability profile centered on the core NSClient and NSClient++ products. The durable signal reflects application-layer and deployment-context weaknesses including code injection, insufficiently protected credentials, missing authentication for critical functions, and unquoted search paths—characteristics typical of agents that bridge system access and remote administration. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Nsclient over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-34079HIGH An authenticated remote code execution vulnerability exists in NSClient++ version 0.5.2.35 when the web interface and ExternalScripts module are enabled. A remote attacker with the | Jul 2, 2025 | 7.8 | 36 | NO | YES |
CVE-2025-34078HIGH A local privilege escalation vulnerability exists in NSClient++ 0.5.2.35 when both the web interface and ExternalScripts features are enabled. The configuration file (nsclient.ini) | Jul 2, 2025 | 7.8 | 32 | NO | YES |
CVE-2018-6384HIGH Unquoted Windows search path vulnerability in NSClient++ before 0.4.1.73 allows non-privileged local users to execute arbitrary code with elevated privileges on the system via a ma | Jan 31, 2018 | 7.8 | 24 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Nsclient.
Media articles that mention a CVE ID that affects a product developed by Nsclient — matched by CVE ID, not by vendor name.