CVE-2017-12763
HighSummary
An unspecified server utility in NoMachine before version 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by accessing local files.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to update NoMachine to version 5.3.10 or later to mitigate this vulnerability.
Other vulnerabilities in NoMachine
See all- CVE-2026-18264High
Vulnerability in NoMachine in the getstat service is due to lack of proper validation of a user-supplied string before using it to execute a system call. A remote authenticated attacker can exploit this flaw to execute arbitrary code in the context of the service account.
- CVE-2026-53694High
An Argument Injection vulnerability was found in NoMachine before versions 9.5.7 and 8.23.2. The flaw is due to improper neutralization of argument delimiters in a command, allowing an attacker to inject malicious arguments.
Original NVD description (English source)
An unspecified server utility in NoMachine before 5.3.10 on Mac OS X and Linux allows authenticated users to gain privileges by gaining access to local files.