Live › vulnerability › CVE-2026-111184
Go to dashboardThe NoMachine Device Service sets incorrect permissions on a named pipe. A local user with low privileges can abuse it to run code as SYSTEM on Windows.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any Windows machine with NoMachine installed is exposed to a local user who can already run code on it. The sources do not say which NoMachine versions are affected. Systems without NoMachine can skip it.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
NoMachine Named Pipe Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the NoMachine Device Service. The issue results from incorrect permissions on a named pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-31213.
This page as .md · .json · in your agent: get_signal("CVE-2026-111184")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.