Vendor
Nozomi Networks
63 known vulnerabilities in products by Nozomi Networks, 0 of them actively exploited (CISA KEV).
Key figures
63
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-26724 | Nozomi Networks Guardian: OS Command Injection | 7.2 | |
| High | CVE-2026-33924 | Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 | 7.2 | |
| High | CVE-2024-13089 | Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 | 7.2 | |
| High | CVE-2026-31984 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 | 7.5 | |
| High | CVE-2021-26725 | Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4 | 7.2 | |
| High | CVE-2026-33388 | Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 | 7.4 | |
| High | CVE-2022-0551 | Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0 | 7.2 | |
| High | CVE-2022-0550 | Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0 | 7.2 | |
| High | CVE-2023-5938 | Path traversal via 'zip slip' in Arc before v1.6.0 | 8.0 | |
| High | CVE-2026-33390 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 | 8.1 | |
| High | CVE-2026-33923 | Update bundle signature bypass in Guardian/CMC before 26.4.0 | 7.2 | |
| Critical | CVE-2023-29245 | Nozomi Networks Guardian: SQL Injection | 8.1 | |
| High | CVE-2023-2567 | Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0 | 8.8 | |
| High | CVE-2023-22378 | Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2 | 8.8 | |
| High | CVE-2023-23574 | Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2 | 8.8 | |
| Medium | CVE-2026-31983 | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 | 5.3 | |
| High | CVE-2022-4259 | Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 | 8.8 | |
| High | CVE-2023-32649 | DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 | 7.5 | |
| High | CVE-2025-40899 | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 | 8.9 | |
| High | CVE-2026-33389 | Nozomi Networks Guardian: Lack of Administrator Control over Security | 7.5 | |
| High | CVE-2024-0218 | DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1 | 7.5 | |
| High | CVE-2025-40898 | Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 | 8.1 | |
| High | CVE-2026-31985 | Nozomi Networks Remote Collector: Lack of Administrator Control over Security | 8.1 | |
| High | CVE-2025-40889 | Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 | 8.1 | |
| High | CVE-2025-40897 | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 | 8.1 |