Login Request a demo
CM
Product
CMC
by Nozomi Networks · last CVE Sep 8, 2026
17
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Vulnerabilities17In the news1Timeline
Severity mix
Critical 0High 7Medium 9Low 1
Severity
All severities17Critical0High7Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CMC to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-40899
8.9
0%
Apr 15
Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0
Affected: before 26.0.0
CVE-2026-33390
8.1
0%
Jul 9
Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2025-40897
8.1
0%
Apr 15
Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0
Affected: before 26.0.0
CVE-2026-33389
7.5
0%
Sep 8
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
Affected: before 26.3.0
CVE-2026-31984
7.5
1%
Jul 9
DoS through oversized audit log entries in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2026-33388
7.4
0%
Sep 8
Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0
Affected: before 26.3.0
CVE-2026-31982
7.1
0%
Jul 9
Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2026-33391
5.4
0%
Sep 8
Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0
Affected: before 26.3.0
CVE-2025-40904
5.4
0%
May 19
HTML injection in Smart Polling in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2026-31983
5.3
0%
Jul 9
Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2026-31981
4.8
0%
Jul 9
HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2025-40903
4.8
0%
May 19
HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-40902
4.8
0%
May 19
HTML injection in Users in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-40901
4.8
0%
May 19
HTML injection in Credentials Manager in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2026-33387
4.6
0%
Sep 8
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
Affected: before 26.3.0
CVE-2025-40900
4.6
0%
May 19
Angular template injection in Reports in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2026-33920
3.5
0%
Sep 8
Cross-site request forgery in the Guardian/CMC login before 26.3.0
Affected: before 26.3.0
Showing 17