What’s Vulnerable › Products

Network Optix Nx Witness VMS vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Network Optix Nx Witness VMS version is affected

Latest Network Optix Nx Witness VMS vulnerabilities

• CVE-2026-78414 — Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name (CVSS 8.0)
• CVE-2026-10056 — CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request (CVSS 7.5)