Exploited vulnerability

CVE-2026-48027

TLP:CLEAR

Nx Console Embedded Malicious Code Vulnerability

Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.

Facts

Vendor: Nx
Product: Nx Console
CVSS: 9.8
EPSS (probability of exploitation within 30 days): 1.9 %
On CISA's Known Exploited Vulnerabilities list since: 27 May 2026
First known exploitation: 27 May 2026
Used in ransomware campaigns (per CISA): Yes
CISA's deadline for US federal agencies: 10 June 2026
Weakness: CWE-506
First seen by Risk Letters: 27 May 2026

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD