Is CVE-2026-53694 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-53694 being exploited in the wild.

How severe is CVE-2026-53694?

Informational severity, with a CVSS score of 7.3, published 10 June 2026.

Which products and versions are affected?

Nomachine before 9.5.7, before 8.23.2.

Is there a fix for CVE-2026-53694?

A patch was published on 2026-05-07: NoMachine versions 9.5.7 and 8.23.2 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-53694 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2026-53694?

Check whether you run Nomachine at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-53694: NoMachine privilege escalation via argument injection in nxchmod.sh

CVE-2026-53694 · Severity: info · CVSS 7.3 · Published 2026-06-10

NoMachine, a remote desktop and remote access tool, contains a vulnerability that could allow a local user to gain elevated system privileges. By exploiting a flaw in how the software handles specific internal scripts, an attacker with limited access to a computer could potentially take full control of the system. This could lead to unauthorized access to sensitive data or the disruption of business operations on the affected machine.

Technologies: Nomachine. Vendors: Nomachine.

Quick answers

Is CVE-2026-53694 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-53694 being exploited in the wild.
How severe is CVE-2026-53694?: Informational severity, with a CVSS score of 7.3, published 10 June 2026.
Which products and versions are affected?: Nomachine before 9.5.7, before 8.23.2.
Is there a fix for CVE-2026-53694?: A patch was published on 2026-05-07: NoMachine versions 9.5.7 and 8.23.2 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-53694 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2026-53694?: Check whether you run Nomachine at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An argument injection vulnerability exists in NoMachine due to improper neutralization of argument delimiters within the 'nxchmod.sh' script. A local attacker with low-level privileges can exploit this flaw by passing specially crafted arguments to the script, leading to execution of commands with elevated permissions (Privilege Escalation). The vulnerability is reachable locally and does not require user interaction, though it may depend on specific environmental preconditions. The issue is resolved in NoMachine versions 9.5.7 and 8.23.2.

Affected products

NoMachine NoMachine before 9.5.7, before 8.23.2

Timeline

2026-05-07: patched: NoMachine versions 9.5.7 and 8.23.2 released
2026-06-10: disclosed: CVE-2026-53694 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.