CM
Product
CMC
39
CVEs
0
On KEV
8.9
Max CVSS
2
New 30D
Severity mix
Critical 0High 19Medium 19Low 1
Watch
Add CMC to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-40899 | 8.9 | Apr 15 | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 Affected: before 26.0.0 |
| CVE-2025-40892 | 8.9 | Dec 18 | Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 Affected: before 25.5.0 |
| CVE-2025-40886 | 8.8 | Oct 7 | Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2026-33390 | 8.1 | Jul 9 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2025-40897 | 8.1 | Apr 15 | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 Affected: before 26.0.0 |
| CVE-2025-40898 | 8.1 | Dec 18 | Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 Affected: before 25.5.0 |
| CVE-2025-40889 | 8.1 | Oct 7 | Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2025-3719 | 8.1 | Oct 7 | Incorrect authorization for CLI in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2025-40890 | 7.9 | Nov 25 | Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0 Affected: before 25.4.0 |
| CVE-2026-33389 | 7.5 | Sep 8 | Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 Affected: before 26.3.0 |
| CVE-2026-31984 | 7.5 | Jul 9 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2023-5253 | 7.5 | Jan 15 | Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0 Affected: before 23.3.0 |
| CVE-2026-33388 | 7.4 | Sep 8 | Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 Affected: before 26.3.0 |
| CVE-2026-33924 New | 7.2 | Oct 29 | Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 Affected: before 26.4.0 |
| CVE-2026-33923 New | 7.2 | Oct 29 | Update bundle signature bypass in Guardian/CMC before 26.4.0 Affected: before 26.4.0 |
| CVE-2024-13089 | 7.2 | Jun 10 | Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 Affected: before 24.6.0 |
| CVE-2023-6916 | 7.2 | Apr 10 | Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1 Affected: before 23.4.1 |
| CVE-2026-31982 | 7.1 | Jul 9 | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2024-13090 | 7.0 | Jun 10 | Privilege escalation in Guardian/CMC before 24.6.0 Affected: before 24.6.0 |
Showing 19