CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability. Nx
Nx Console Embedded Malicious Code Vulnerability. Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory.
- CISA KEV-listed (remediation due 2026-06-10)
- used in ransomware campaigns
- EPSS 32.1% (96.9% percentile)