Live › vulnerability › CVE-2026-92209
Go to dashboardNoMachine's Redis database authentication generates credentials with insufficient entropy, so a local user who already runs low-privileged code can guess or predict them. A successful attacker gains the privileges of the service account and can execute arbitrary code as that account.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Hosts running NoMachine where a local, non-privileged user can run code, such as shared multi-user servers or workstations. The sources do not say whether default installs enable the vulnerable Redis component, so the configuration is unknown. Systems where only trusted administrators have local logins are less exposed.
No product ranges from the sources yet.
ps aux | grep -i redisEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
NoMachine Redis Improper Authentication Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the authentication mechanism controlling access to the Redis database. The issue results from using insufficient entropy in the generation of credentials. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the service account. Was ZDI-CAN-30984.
This page as .md · .json · in your agent: get_signal("CVE-2026-92209")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.