Product by Nozomi Networks
Cmc
54 known vulnerabilities in Cmc (Nozomi Networks), 0 of them actively exploited (CISA KEV).
Key figures
54
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-26724 | Nozomi Networks Guardian: OS Command Injection | 7.2 | |
| High | CVE-2026-33924 | Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 | 7.2 | |
| High | CVE-2024-13089 | Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 | 7.2 | |
| High | CVE-2026-31984 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 | 7.5 | |
| High | CVE-2021-26725 | Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4 | 7.2 | |
| High | CVE-2026-33388 | Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 | 7.4 | |
| High | CVE-2022-0551 | Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0 | 7.2 | |
| High | CVE-2022-0550 | Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0 | 7.2 | |
| High | CVE-2026-33390 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 | 8.1 | |
| High | CVE-2026-33923 | Update bundle signature bypass in Guardian/CMC before 26.4.0 | 7.2 | |
| Critical | CVE-2023-29245 | Nozomi Networks Guardian: SQL Injection | 8.1 | |
| High | CVE-2023-2567 | Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0 | 8.8 | |
| High | CVE-2023-22378 | Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2 | 8.8 | |
| High | CVE-2023-23574 | Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2 | 8.8 | |
| Medium | CVE-2026-31983 | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 | 5.3 | |
| High | CVE-2022-4259 | Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 | 8.8 | |
| High | CVE-2023-32649 | DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 | 7.5 | |
| High | CVE-2025-40899 | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 | 8.9 | |
| High | CVE-2026-33389 | Nozomi Networks Guardian: Lack of Administrator Control over Security | 7.5 | |
| High | CVE-2025-40898 | Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 | 8.1 | |
| High | CVE-2025-40889 | Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 | 8.1 | |
| High | CVE-2025-40897 | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 | 8.1 | |
| High | CVE-2023-6916 | Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1 | 7.2 | |
| High | CVE-2026-31982 | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 | 7.1 | |
| High | CVE-2025-40892 | Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 | 8.9 |