CVE-2018-17980: Nomachine

High severity, CVSS 7.8. EPSS: 4.6% chance of exploitation in the next 30 days.

NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file located in the same directory as a .nxs file, as demonstrated by a scenario where the .nxs file and the DLL are in the current working directory, and the Trojan horse code is executed. (The directory could, in general, be on a local filesystem or a network share.).

Affected products

• Nomachine Nomachine: before 5.3.27 (fixed in 5.3.27); from 6.0.0, before 6.3.6 (fixed in 6.3.6)

Published 2018-10-15. Last modified 2026-06-17.