CVE-2026-48027 Nx Nx Console: hidden backdoor
In plain words: The software was shipped with hidden malicious code inside it. Whoever planted it has secret access to every copy.
Confirmed exploited by CISA on · US federal patch deadline Jun 10, 2026
What to do
- Install Nx's security update for Nx Console. If no update exists, follow the vendor's workaround or stop using the product until one ships.
- Install system updates the day they come out — most phone zero-days are fixed in a point release.
- Restart your phone every few days; some spyware does not survive a reboot.
- If you are a journalist, activist, lawyer, politician or executive, turn on Lockdown Mode (iPhone) or Advanced Protection (Android).
Who is affected
Could reach you. Used in ransomware, which spreads to ordinary people and small businesses.
What's at risk: Messages, photos, location, microphone and camera. The most serious ones are "zero-click": no tap needed from the owner. They are usually used as spyware against a small number of chosen people.
The details
- Official name
- Nx Console Embedded Malicious Code Vulnerability
- Product
- Nx Nx Console
- CISA description
- Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.
- Type of flaw
- Hidden backdoor (CWE-506)
- Confirmed exploited
- May 27, 2026 — known to be used in ransomware attacks
- US federal patch deadline
- Jun 10, 2026
Ask Cleus about it
Ask about a vulnerability, an update, a weird message, or the news. Plain-word answers, free, no account.
Answering about CVE-2026-48027 ·
Questions about CVE-2026-48027
Is CVE-2026-48027 being exploited?
Yes. CISA added CVE-2026-48027 to its Known Exploited Vulnerabilities catalog on May 27, 2026, which means there is reliable evidence of real-world attacks, including by ransomware groups.
How do I fix CVE-2026-48027?
Install Nx's security update for Nx Console. If no update exists, follow the vendor's workaround or stop using the product until one ships. Install system updates the day they come out — most phone zero-days are fixed in a point release.
Am I affected by CVE-2026-48027?
Only if you use Nx Nx Console. Used in ransomware, which spreads to ordinary people and small businesses.