Login Request a demo
CM
Product
CMC
by Nozomi Networks · last CVE Sep 8, 2026
34
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Vulnerabilities34In the news1Timeline
Severity mix
Critical 0High 15Medium 18Low 1
Severity
All severities34Critical0High15Medium18Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add CMC to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-40888
6.5
0%
Oct 7
Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0
Affected: before 25.3.0
CVE-2025-40887
6.5
0%
Oct 7
Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
Affected: before 25.2.0
CVE-2025-40885
6.5
0%
Oct 7
Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
Affected: before 25.2.0
CVE-2025-40893
6.1
0%
Dec 18
HTML injection in Asset List in Guardian/CMC before 25.5.0
Affected: before 25.5.0
CVE-2026-33391
5.4
0%
Sep 8
Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0
Affected: before 26.3.0
CVE-2025-40904
5.4
0%
May 19
HTML injection in Smart Polling in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-40894
5.4
0%
Mar 4
HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0
Affected: before 25.6.0
CVE-2025-3718
5.4
0%
Oct 7
Client-side path traversal in Guardian/CMC before 25.2.0
Affected: before 25.2.0
CVE-2026-31983
5.3
0%
Jul 9
Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2026-31981
4.8
0%
Jul 9
HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0
Affected: before 26.2.0
CVE-2025-40903
4.8
0%
May 19
HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-40902
4.8
0%
May 19
HTML injection in Users in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-40901
4.8
0%
May 19
HTML injection in Credentials Manager in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-40895
4.8
0%
Mar 4
HTML injection in Sensor Map in CMC before 25.6.0
Affected: before 25.6.0
CVE-2025-40891
4.7
0%
Dec 18
HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0
Affected: before 25.5.0
CVE-2026-33387
4.6
0%
Sep 8
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
Affected: before 26.3.0
CVE-2025-40900
4.6
0%
May 19
Angular template injection in Reports in Guardian/CMC before 26.1.0
Affected: before 26.1.0
CVE-2025-1501
4.3
0%
Aug 26
Incorrect authorization for traces request/download in CMC before 25.1.0
Affected: before 25.1.0
Showing 18