CISA
CVE‑2026‑48027 Compromises Nx Console, Leads to Credential Theft
The CISA maintains the Known Exploited Vulnerabilities (KEV) Catalog to assist organizations in managing vulnerabilities that have been exploited in the wild. It serves as a crucial resource for cybersecurity professionals to prioritize their vulnerability management efforts. The catalog includes details about specific vulnerabilities, such as CVE-2026-48027, which involves an embedded malicious code vulnerability in the Nx Console.
It's recommended for organizations to apply vendor mitigation strategies or discontinue use if mitigations are not available. Moreover, the KEV catalog is accessible in CSV and JSON formats and offers an option to subscribe for updates.
Story timeline CVE-2026-48027
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 27 May · 19:31 UTC | CISA | CVE‑2026‑48027 Compromises Nx Console, Leads to Credential Theft |
| Thu 28 May · 00:18 UTC | CISA | CVE‑2026‑48027 Compromises Nx Console, Leads to Credential Theft (this article) |
| Thu 28 May · 04:50 UTC | SecurityOnline | Motorola Fixes Amazon App Redirect Bug After Smart Feed Abuse |
| Thu 28 May · 06:32 UTC | SecurityOnline | FortiClient EMS flaw used to drop EKZ Infostealer via fake updates |
| Thu 28 May · 08:11 UTC | SecurityOnline | Showboat malware leverages critical CVEs to spy on telecoms |
| Thu 28 May · 10:31 UTC | SecurityOnline | State-Sponsored Actors Operationalize ROADtools Framework in Cloud Campaigns |
| Thu 28 May · 13:31 UTC | Security Affairs | CISA warns of Daemon Tools, TanStack and Nx Console flaws |