Nx Witness VMS vulnerabilities

2 known vulnerabilities in Nx Witness VMS from Network Optix. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.0 High severity

  Nx Witness VMS: Improper Neutralization of Input During Web Page Generation

  CVE-2026-78414Aug 24, 2026Network Optix

  Cross-site scripting in the Web Administration interface of Network Optix Nx Witness VMS before version 6.1.3 on Linux, Windows and MacOS allows an adjacent-network attacker to execute arbitrary JavaScript in the browser of an authenticated administrator and s

• 7.5 High severity

  Nx Witness VMS: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2026-10056May 29, 2026Network Optix

  CORS misconfiguration in the REST API of Network Optix Nx Witness VMS before version 6.1.2, when running in the default Standard security mode, on Linux and Windows allows an unauthenticated remote attacker to steal the session token of an authenticated user a