Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the NoMachine Device Server. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-28494.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2026-5055 | CVSS 7.8 HIGH NoMachine privilege escalation via uncontrolled search path (CWE-427). Local attackers can execute code as SYSTEM by exploiting insecure library loading in Device Server. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/PzP8KoMRAX
Post summary
The tweet highlights a new CVE with high severity, explains the vulnerability, and urges immediate patching.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nomachine | nomachine | - | - | - |