Product by Nozomi Networks
Nozomi Networks CMC
40 known vulnerabilities in Nozomi Networks CMC (Nozomi Networks), 0 of them actively exploited (CISA KEV).
Key figures
40
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-26724 | Nozomi Networks Guardian: OS Command Injection | 7.2 | |
| High | CVE-2026-31984 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 | 7.5 | |
| High | CVE-2021-26725 | Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4 | 7.2 | |
| High | CVE-2022-0551 | Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0 | 7.2 | |
| High | CVE-2022-0550 | Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0 | 7.2 | |
| High | CVE-2026-33390 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 | 8.1 | |
| Critical | CVE-2023-29245 | Nozomi Networks Guardian: SQL Injection | 8.1 | |
| High | CVE-2023-2567 | Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0 | 8.8 | |
| High | CVE-2023-22378 | Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2 | 8.8 | |
| High | CVE-2023-23574 | Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2 | 8.8 | |
| Medium | CVE-2026-31983 | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 | 5.3 | |
| High | CVE-2022-4259 | Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2 | 8.8 | |
| High | CVE-2023-32649 | DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 | 7.5 | |
| High | CVE-2025-40898 | Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 | 8.1 | |
| High | CVE-2025-40889 | Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 | 8.1 | |
| High | CVE-2026-31982 | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 | 7.1 | |
| High | CVE-2025-40892 | Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 | 8.9 | |
| Medium | CVE-2023-23903 | DoS via SAML configuration in Guardian/CMC before 22.6.2 | 4.9 | |
| High | CVE-2025-3719 | Incorrect authorization for CLI in Guardian/CMC before 25.2.0 | 8.1 | |
| High | CVE-2025-40886 | Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 | 7.5 | |
| High | CVE-2023-24471 | Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2 | 6.5 | |
| High | CVE-2025-3718 | Client-side path traversal in Guardian/CMC before 25.2.0 | 7.9 | |
| Medium | CVE-2026-31981 | HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 | 5.9 | |
| Medium | CVE-2025-40904 | HTML injection in Smart Polling in Guardian/CMC before 26.1.0 | 6.5 | |
| High | CVE-2023-5253 | Nozomi Networks Guardian: Missing Authentication for Critical Function | 5.3 |