GU
Product
Guardian
32
CVEs
0
On KEV
8.9
Max CVSS
0
New 30D
Severity mix
Critical 0High 15Medium 17Low 1
Watch
Add Guardian to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-40899 | 8.9 | Apr 15 | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 Affected: before 26.0.0 |
| CVE-2025-40892 | 8.9 | Dec 18 | Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 Affected: before 25.5.0 |
| CVE-2025-40886 | 8.8 | Oct 7 | Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2026-33390 | 8.1 | Jul 9 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2025-40897 | 8.1 | Apr 15 | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 Affected: before 26.0.0 |
| CVE-2025-40898 | 8.1 | Dec 18 | Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 Affected: before 25.5.0 |
| CVE-2025-40889 | 8.1 | Oct 7 | Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2025-3719 | 8.1 | Oct 7 | Incorrect authorization for CLI in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2025-40890 | 7.9 | Nov 25 | Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0 Affected: before 25.4.0 |
| CVE-2026-33389 | 7.5 | Sep 8 | Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 Affected: before 26.3.0 |
| CVE-2026-31984 | 7.5 | Jul 9 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2026-33388 | 7.4 | Sep 8 | Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 Affected: before 26.3.0 |
| CVE-2024-13089 | 7.2 | Jun 10 | Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 Affected: before 24.6.0 |
| CVE-2026-31982 | 7.1 | Jul 9 | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2024-13090 | 7.0 | Jun 10 | Privilege escalation in Guardian/CMC before 24.6.0 Affected: before 24.6.0 |
| CVE-2025-40888 | 6.5 | Oct 7 | Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0 Affected: before 25.3.0 |
| CVE-2025-40887 | 6.5 | Oct 7 | Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2025-40885 | 6.5 | Oct 7 | Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2025-40893 | 6.1 | Dec 18 | HTML injection in Asset List in Guardian/CMC before 25.5.0 Affected: before 25.5.0 |
| CVE-2026-33391 | 5.4 | Sep 8 | Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 Affected: before 26.3.0 |
| CVE-2025-40904 | 5.4 | May 19 | HTML injection in Smart Polling in Guardian/CMC before 26.1.0 Affected: before 26.1.0 |
| CVE-2025-40894 | 5.4 | Mar 4 | HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0 Affected: before 25.6.0 |
| CVE-2025-3718 | 5.4 | Oct 7 | Client-side path traversal in Guardian/CMC before 25.2.0 Affected: before 25.2.0 |
| CVE-2026-31983 | 5.3 | Jul 9 | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2024-4465 | 5.0 | Sep 11 | Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0 Affected: before 24.2.0 |
| CVE-2026-31981 | 4.8 | Jul 9 | HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 Affected: before 26.2.0 |
| CVE-2025-40903 | 4.8 | May 19 | HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0 Affected: before 26.1.0 |
| CVE-2025-40902 | 4.8 | May 19 | HTML injection in Users in Guardian/CMC before 26.1.0 Affected: before 26.1.0 |
| CVE-2025-40901 | 4.8 | May 19 | HTML injection in Credentials Manager in Guardian/CMC before 26.1.0 Affected: before 26.1.0 |
| CVE-2025-40891 | 4.7 | Dec 18 | HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0 Affected: before 25.5.0 |
| CVE-2026-33387 | 4.6 | Sep 8 | Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0 Affected: before 26.3.0 |
| CVE-2025-40900 | 4.6 | May 19 | Angular template injection in Reports in Guardian/CMC before 26.1.0 Affected: before 26.1.0 |
| CVE-2026-33920 | 3.5 | Sep 8 | Cross-site request forgery in the Guardian/CMC login before 26.3.0 Affected: before 26.3.0 |
Showing 33