NetSupport Manager 0

Gbhackers •Mayura Kathir • January 26, 2026

Two critical 0-day vulnerabilities in NetSupport Manager that, when chained, allow unauthenticated remote code execution (RCE). The vulnerabilities were discovered during routine security assessments of operational technology (OT) environments and affect version 14.10.4.0 and earlier, with fixes implemented in version 14.12.0000 released on July 29th, 2025. The two vulnerabilities tracked as CVE-2025-34164 and CVE-2025-34165 reside […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical 0-Day Vulnerabilities in NetSupport Manager Exposed Two critical 0-day vulnerabilities in NetSupport Manager, affecting versions up to 14.10.4.0, allow unauthenticated remote code execution. Discovered during security assessments, these vulnerabilities are tracked as CVE-2025-34164 and CVE-2025-34165, with patches available since July 29, 2025. 2 sources 45

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (2)

CVE-2025-34164 CVE-2025-34165