<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: nomachine</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-5055: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-5055.html</link><guid>https://patchthecve.com/cve/CVE-2026-5055.html</guid><pubDate>Wed, 17 Jun 2026 10:58:22 +0000</pubDate><description>HIGH 7.8: NoMachine Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine.  An attacker must first obtain the ability to execute low-privileged code on the target system in order to exp</description></item><item><title>CVE-2026-5054: NoMachine External Control of File Path Local Privilege Escalation Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-5054.html</link><guid>https://patchthecve.com/cve/CVE-2026-5054.html</guid><pubDate>Wed, 17 Jun 2026 10:58:22 +0000</pubDate><description>HIGH 7.8: NoMachine External Control of File Path Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit</description></item><item><title>CVE-2026-5053: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability</title><link>https://patchthecve.com/cve/CVE-2026-5053.html</link><guid>https://patchthecve.com/cve/CVE-2026-5053.html</guid><pubDate>Wed, 17 Jun 2026 10:58:20 +0000</pubDate><description>HIGH 7.1: NoMachine External Control of File Path Arbitrary File Deletion Vulnerability. This vulnerability allows local attackers to delete arbitrary files on affected installations of NoMachine. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit</description></item></channel></rss>