Get real-time updates on Telegram
CVE-2026-78414: Nx Witness VMS 0 to before 6.1.3
CVE-2026-78414. CVSS 3.1 base score 8.0 (HIGH, Source advisory). EPSS 0.00338 (percentile 0.25252), scored 11-Oct-2026.
Affected technology
Nx Witness VMS · 0 to before 6.1.3
Network Optix
Description’s affected range: before version 6.1.3 on Linux, Windows and MacOS
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 3.1): Adjacent network · No privileges required · User interaction required
What an attacker can do
An adjacent-network attacker can execute arbitrary JavaScript in the browser of an authenticated administrator and steal the administrator's session token, resulting in Administrator Account Takeover. Source advisory’s CVSS 3.1 assessment (base score 8.0/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-79
- CCR priority
- 32.1 /100 (P4)
- CVSS 3.1
- 8.0 /10 · CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00338 · percentile 0.25252 · 2026-10-11
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-12 16:54:24.294989+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-78414.html