NN
Vendor
Nozomi Networks
77
CVEs
0
On KEV
4
New 30D
Products
CM8.9
CMC
Nozomi Networks
37 CVEs0 on KEV2 new
GU8.9
Guardian
Nozomi Networks
35 CVEs0 on KEV2 new
AR7.5
Arc
Nozomi Networks
4 CVEs0 on KEV0 new
RC8.1
Remote Collector
Nozomi Networks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-33924 New | GU Guardian Nozomi Networks | 7.2 | Oct 29 | Authenticated RCE in update functionality in Guardian/CMC before 26.4.0 |
| CVE-2026-33923 New | GU Guardian Nozomi Networks | 7.2 | Oct 29 | Update bundle signature bypass in Guardian/CMC before 26.4.0 |
| CVE-2026-33920 | CM CMC Nozomi Networks | 3.5 | Sep 8 | Cross-site request forgery in the Guardian/CMC login before 26.3.0 |
| CVE-2026-33391 | CM CMC Nozomi Networks | 5.4 | Sep 8 | Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0 |
| CVE-2026-33389 | GU Guardian Nozomi Networks | 7.5 | Sep 8 | Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 |
| CVE-2026-33388 | GU Guardian Nozomi Networks | 7.4 | Sep 8 | Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0 |
| CVE-2026-33387 | CM CMC Nozomi Networks | 4.6 | Sep 8 | Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0 |
| CVE-2026-33922 | AR Arc Nozomi Networks | 6.0 | Aug 11 | Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0 |
| CVE-2026-33921 | AR Arc Nozomi Networks | 5.2 | Aug 11 | Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0 |
| CVE-2026-33390 | GU Guardian Nozomi Networks | 8.1 | Jul 9 | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 |
| CVE-2026-31985 | RC Remote Collector Nozomi Networks | 8.1 | Jul 9 | Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0 |
| CVE-2026-31984 | GU Guardian Nozomi Networks | 7.5 | Jul 9 | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 |
| CVE-2026-31983 | CM CMC Nozomi Networks | 5.3 | Jul 9 | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 |
| CVE-2026-31982 | GU Guardian Nozomi Networks | 7.1 | Jul 9 | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 |
| CVE-2026-31981 | CM CMC Nozomi Networks | 4.8 | Jul 9 | HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 |
| CVE-2025-40904 | GU Guardian Nozomi Networks | 5.4 | May 19 | HTML injection in Smart Polling in Guardian/CMC before 26.1.0 |
| CVE-2025-40903 | CM CMC Nozomi Networks | 4.8 | May 19 | HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0 |
| CVE-2025-40902 | CM CMC Nozomi Networks | 4.8 | May 19 | HTML injection in Users in Guardian/CMC before 26.1.0 |
| CVE-2025-40901 | GU Guardian Nozomi Networks | 4.8 | May 19 | HTML injection in Credentials Manager in Guardian/CMC before 26.1.0 |
| CVE-2025-40900 | CM CMC Nozomi Networks | 4.6 | May 19 | Angular template injection in Reports in Guardian/CMC before 26.1.0 |
| CVE-2025-40899 | GU Guardian Nozomi Networks | 8.9 | Apr 15 | Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 |
| CVE-2025-40897 | CM CMC Nozomi Networks | 8.1 | Apr 15 | Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 |
| CVE-2025-40896 | AR Arc Nozomi Networks | 4.8 | Mar 4 | Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0 |
| CVE-2025-40895 | CM CMC Nozomi Networks | 4.8 | Mar 4 | HTML injection in Sensor Map in CMC before 25.6.0 |
| CVE-2025-40894 | CM CMC Nozomi Networks | 5.4 | Mar 4 | HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0 |
| CVE-2025-40898 | CM CMC Nozomi Networks | 8.1 | Dec 18 | Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 |
| CVE-2025-40893 | GU Guardian Nozomi Networks | 6.1 | Dec 18 | HTML injection in Asset List in Guardian/CMC before 25.5.0 |
| CVE-2025-40892 | CM CMC Nozomi Networks | 8.9 | Dec 18 | Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 |
| CVE-2025-40891 | GU Guardian Nozomi Networks | 4.7 | Dec 18 | HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0 |
| CVE-2025-40890 | GU Guardian Nozomi Networks | 7.9 | Nov 25 | Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0 |
| CVE-2025-40888 | CM CMC Nozomi Networks | 6.5 | Oct 7 | Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0 |
| CVE-2025-40889 | CM CMC Nozomi Networks | 8.1 | Oct 7 | Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 |
| CVE-2025-40887 | CM CMC Nozomi Networks | 6.5 | Oct 7 | Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 |
| CVE-2025-40886 | CM CMC Nozomi Networks | 8.8 | Oct 7 | Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 |
| CVE-2025-40885 | CM CMC Nozomi Networks | 6.5 | Oct 7 | Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0 |
| CVE-2025-3719 | GU Guardian Nozomi Networks | 8.1 | Oct 7 | Incorrect authorization for CLI in Guardian/CMC before 25.2.0 |
| CVE-2025-3718 | GU Guardian Nozomi Networks | 5.4 | Oct 7 | Client-side path traversal in Guardian/CMC before 25.2.0 |
| CVE-2025-1501 | CM CMC Nozomi Networks | 4.3 | Aug 26 | Incorrect authorization for traces request/download in CMC before 25.1.0 |
| CVE-2024-13090 | CM CMC Nozomi Networks | 7.0 | Jun 10 | Privilege escalation in Guardian/CMC before 24.6.0 |
| CVE-2024-13089 | CM CMC Nozomi Networks | 7.2 | Jun 10 | Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 |
| CVE-2024-4465 | GU Guardian Nozomi Networks | 5.0 | Sep 11 | Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0 |