Improper Authentication Vulnerability in NoMachine Redis

CVE-2026-92209

What is CVE-2026-92209?

The NoMachine Redis product contains a vulnerability in its authentication mechanism, which can lead to local privilege escalation. Attackers with access to a low-privileged shell on the system can exploit this flaw due to insufficient entropy in the credential generation process. By leveraging this vulnerability, they can gain elevated permissions and execute arbitrary commands as the service account, potentially compromising system integrity.

References