<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Network Optix — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/nx" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Network Optix (nx).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/nx.png</url>
      <title>Network Optix — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2026-78414 · 8 HIGH — Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name</title>
      <link>https://vulnogram.org/CVE-2026-78414</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-78414</guid>
      <description>Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administr…</description>
      <category>High</category>
      <pubDate>Mon, 24 Aug 2026 14:51:08 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2026-10056 · 7.5 HIGH 🌩️ — CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request</title>
      <link>https://vulnogram.org/CVE-2026-10056</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2026-10056</guid>
      <description>CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unauthenticated remote attacker to steal the session token of an authentica…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Fri, 29 May 2026 08:04:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-6263 · 8.3 HIGH 🌩️ — Server Spoofing Vulnerability in NxCloud</title>
      <link>https://vulnogram.org/CVE-2023-6263</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-6263</guid>
      <description>An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization…</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 22 Nov 2023 17:56:56 GMT</pubDate>
    </item>
  </channel>
</rss>
