CVE-2026-22923CWE-121

A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512)

High · published February 10, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
4.3
In the wild
Unconfirmed
What it is

⚡ There’s a data validation vulnerability in NX that opens a door for local attackers! With versions below V2512, the PDF export process may become a playground for mischief. 🔥 Think of it like a restaurant's kitchen where the chef can swap ingredients without anyone inspecting the dish. If a crafty cook decides to slip in something unexpected during the PDF export, the result could be quite the surprise for diners! An attacker with local access could manipulate internal data during the PDF export process, potentially leading to arbitrary code execution. This could mean anything from data corruption to executing malicious commands, which is absolutely devastating!

Put simply

Think of it like a restaurant's kitchen where the chef can swap ingredients without anyone inspecting the dish. If a crafty cook decides to slip in something unexpected during the PDF export, the result could be quite the surprise for diners! In NX versions below V2512, the lack of proper data validation during PDF exports allows local attackers to interfere with internal data, creating an avenue for arbitrary code execution.

What to do

An attacker with local access could manipulate internal data during the PDF export process, potentially leading to arbitrary code execution. This could mean anything from data corruption to executing malicious commands, which is absolutely devastating! Immediately patch your NX installation to version V2512 or later to close this vulnerability. Review your access controls to limit local access to trusted users only, and consider implementing additional security measures to monitor data integrity during exports. You've got this! Stay vigilant, implement these fixes, and keep your environment secure! 🛡️

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00155 · 4.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-02-10T09:58Z
EPSS history
Timeline
  • 10 FEB 09:58Z
    A vulnerability has been identified in NX (All versions < V2512), NX (Managed Mode) (All versions < V2512)
    cvelistv5