NX: CVE Program partner

CVEs, 365 days24 all time, 1 rejected

Quality100%median 99%

CVSS by the CNA100%share of records

CWE100%share of records

Affected versions100%not n/a or unspecified

CVSS added by CISA0%lower is better

Organisation	Network Optix
Role	CNA
Type	Vendor, Open Source
Reports to	mitre
Scope	All Network Optix products, including <a href='https://www.networkoptix.com/nx-witness' target='_blank'>https://www.networkoptix.com/nx-witness</a> and <a href='https://www.networkoptix.com/powered-by-nx' target='_blank'>https://www.networkoptix.com/powered-by-nx</a>.
Advisories	https://www.networkoptix.com/blog

CVE-2026-78414 2026-08-24 · CVSS 8.0
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-net
CVE-2026-10056 2026-05-29 · CVSS 7.5
CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Win
CVE-2023-6263 2023-11-22 · CVSS 8.3
An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identi

NX