What is CVE-2026-53694?

CVE-2026-53694 is a vulnerability in Nomachine, classified under Argument Injection. Published 2026-06-10.

Is CVE-2026-53694 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Nomachine

CVE-2026-53694

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Nomachine allows Argument Injection.This issue affects Nomachine: before 9.5.7, before 8.23.2.

EPSS: 0.001 (3.3th percentile) — read the EPSS interpretation.

Affected products

Nomachine — versions 7.0.0, 0

Weakness classification (CWE)

CWE-88 — Argument Injection

Public proof-of-concept exploits

do4choo/CVE-2026-53694-NoMachine-LPE

References

5a6e4751-2f3f-4070-9419-94fb35b644e8 (release-notes)
5a6e4751-2f3f-4070-9419-94fb35b644e8 (release-notes)

Frequently asked questions

What is CVE-2026-53694?: CVE-2026-53694 is a vulnerability in Nomachine, classified under Argument Injection. Published 2026-06-10.
Is CVE-2026-53694 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.