Nozomi Networks vulnerabilities
63 CVEs and advisories name Nozomi Networks as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-33924Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
- CVE-2026-33923Update bundle signature bypass in Guardian/CMC before 26.4.0
- CVE-2026-33920Cross-site request forgery in the Guardian/CMC login before 26.3.0
- CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0
- CVE-2026-33389Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
- CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0
- CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
- CVE-2026-33922Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0
- CVE-2026-33921Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0
- CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0
- CVE-2026-31985Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
- CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.0
- CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
- CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0
- CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0
- CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC before 26.1.0
- CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0
- CVE-2025-40902HTML injection in Users in Guardian/CMC before 26.1.0
- CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC before 26.1.0
- CVE-2025-40900Angular template injection in Reports in Guardian/CMC before 26.1.0
- CVE-2025-40899Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0
- CVE-2025-40897Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0
- CVE-2025-40896Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0
- CVE-2025-40895HTML injection in Sensor Map in CMC before 25.6.0
- CVE-2025-40894HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0
- CVE-2025-40898Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0
- CVE-2025-40893HTML injection in Asset List in Guardian/CMC before 25.5.0
- CVE-2025-40892Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0
- CVE-2025-40891HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0
- CVE-2025-40890Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0