๐ฅ This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2026-48027: Nx Console Embedded Malicious Code Vulnerability
Summary
Nx Console (a development tool extension) contained embedded malicious code that was published in a compromised version of the software. The malicious code downloaded hidden instructions that could steal login credentials and other sensitive information from a developer's computer and active memory.
Solution / Mitigation
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance (federal cybersecurity directives) for cloud services, or discontinue use of the product if mitigations are unavailable.
Vulnerability Details
EPSS: 0.0%
Yes
๐ฅ Actively Exploited
May 26, 2026
Classification
Taxonomy References
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-48027
First tracked: May 27, 2026 at 02:00 PM
Classified by LLM (prompt v3) ยท confidence: 95%