PT-2026-44044 · Unknown · Nx Console

Ashish Kurmi · Published 2026-05-27 · Updated 2026-07-05 · CVE-2026-48027

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Nx Console version 18.95.0

Description A malicious version of Nx Console, which serves as the user interface for Nx and Lerna, was published to the Visual Studio Marketplace and OpenVSX. The compromised version was available for approximately 18 minutes on the Visual Studio Marketplace and approximately 36 minutes on OpenVSX.

Recommendations Upgrade Nx Console to version 18.100.0.

Exploit

Fix

RCE

Weakness Enumeration

CWE-506

Related Identifiers

CVE-2026-48027

GHSA-C9J4-9M59-847W

Affected Products

Nx Console

References · 31

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48027.json · Exploit
• 🔥 https://stepsecurity.io/blog/nx-console-vs-code-extension-compromised · Exploit
• https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-48027 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48027 · Security Note
• https://nx.dev/blog/nx-console-v18-95-0-postmortem#indicators-of-compromise · Vendor Advisory
• https://github.com/nrwl/nx-console/issues/3139 · Note
• https://twitter.com/DFIR_Radar/status/2073452498073891060 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-48027 · Note
• https://reddit.com/r/CVEWatch/comments/1tpz4cf/top_10_trending_cves_28052026 · Reddit Post
• https://twitter.com/Atarussecurity/status/2060394569855111619 · Twitter Post
• https://twitter.com/CISACyber/status/2059697669157609976 · Twitter Post
• https://twitter.com/CISACyber/status/2060078960101179648 · Twitter Post
• https://twitter.com/Leila97726926/status/2060021359908966761 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1tqx4fa/top_10_trending_cves_29052026 · Reddit Post