NN
Vendor
Nozomi Networks
38
CVEs
0
On KEV
0
New 30D
Products
CM8.9
CMC
Nozomi Networks
17 CVEs0 on KEV0 new
GU8.9
Guardian
Nozomi Networks
17 CVEs0 on KEV0 new
AR7.5
Arc
Nozomi Networks
3 CVEs0 on KEV0 new
RC8.1
Remote Collector
Nozomi Networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33920 | GU Guardian Nozomi Networks | 3.5 | Sep 8 | Cross-site request forgery in the Guardian/CMC login before 26.3.0 |
| CVE-2026-33391 | CM CMC Nozomi Networks | 5.4 | Sep 8 | Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 |
| CVE-2026-33389 | CM CMC Nozomi Networks | 7.5 | Sep 8 | Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 |
| CVE-2026-33388 | GU Guardian Nozomi Networks | 7.4 | Sep 8 | Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 |
| CVE-2026-33387 | CM CMC Nozomi Networks | 4.6 | Sep 8 | Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0 |
| CVE-2026-33922 | AR Arc Nozomi Networks | 6.0 | Aug 11 | Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0 |
| CVE-2026-33921 | AR Arc Nozomi Networks | 5.2 | Aug 11 | Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0 |
| CVE-2026-33390 | GU Guardian Nozomi Networks | 8.1 | Jul 9 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 |
| CVE-2026-31985 | RC Remote Collector Nozomi Networks | 8.1 | Jul 9 | Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0 |
| CVE-2026-31984 | GU Guardian Nozomi Networks | 7.5 | Jul 9 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 |
| CVE-2026-31983 | GU Guardian Nozomi Networks | 5.3 | Jul 9 | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 |
| CVE-2026-31982 | CM CMC Nozomi Networks | 7.1 | Jul 9 | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 |
| CVE-2026-31981 | GU Guardian Nozomi Networks | 4.8 | Jul 9 | HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 |
| CVE-2025-40904 | CM CMC Nozomi Networks | 5.4 | May 19 | HTML injection in Smart Polling in Guardian/CMC before 26.1.0 |
| CVE-2025-40903 | CM CMC Nozomi Networks | 4.8 | May 19 | HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0 |
| CVE-2025-40902 | CM CMC Nozomi Networks | 4.8 | May 19 | HTML injection in Users in Guardian/CMC before 26.1.0 |
| CVE-2025-40901 | CM CMC Nozomi Networks | 4.8 | May 19 | HTML injection in Credentials Manager in Guardian/CMC before 26.1.0 |
| CVE-2025-40900 | GU Guardian Nozomi Networks | 4.6 | May 19 | Angular template injection in Reports in Guardian/CMC before 26.1.0 |
| CVE-2025-40899 | GU Guardian Nozomi Networks | 8.9 | Apr 15 | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 |
| CVE-2025-40897 | CM CMC Nozomi Networks | 8.1 | Apr 15 | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 |