CVE-2026-48027 Nrwl Nx-Console
Nx Console is the user interface for Nx & Lerna. On 19 May 2026, a malicious version of Nx Console, 18.95.0, was published at 12:30 PM UTC and removed soon after at 12:48 PM UTC, leaving it available for ~18 minutes in Visual Studio Marketplace. For OpenVSX,…
- CVSS
- 9.3 Critical
- EPSS
- 1.8%
- Percentile
- 79
- Published
- 2026-05-27
- Force
- 10 of 12
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
On CISA’s exploited list
Nx Console Embedded Malicious Code Vulnerability
- Added
- 2026-05-27
- Federal patch deadline
- 2026-06-10
- Ransomware use
- known