Network Optix vulnerabilities
We track 3 vulnerabilities in Network Optix products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2026.
Latest Network Optix vulnerabilities
- 8.0 High severity
Nx Witness VMS: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and s
- 7.5 High severity
Nx Witness VMS: Permissive Cross-domain Security Policy with Untrusted Domains
CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unauthenticated remote attacker to steal the session token of an authenticated user a
- 8.1 High severity
NxCloud: Authentication Bypass by Spoofing
An issue was discovered by IPVM team in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server to NxCloud by using the exact identification of a legitimate VMS server. As result, it was possible to retrieve authorization headers fr