Skip to content
Hashgraph Guardian vulnerabilities
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
CVE-2026-33924
7.5 High
-
hashgraph guardian, nozomi networks cmc +1 more
Update bundle signature bypass in Guardian/CMC before 26.4.0
CVE-2026-33923
7.5 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Cross-site request forgery in the Guardian/CMC login before 26.3.0
CVE-2026-33920
5.1 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0
CVE-2026-33391
5.3 Medium
-
hashgraph guardian, nozomi networks arc, cmc +1 more +3 more
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
CVE-2026-33389
5.3 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0
CVE-2026-33388
6.4 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CVE-2026-33387
5.1 Medium
-
hashgraph guardian
guardian atom exhaustion in Guardian.Permissions.encode_permissions!/1
CVE-2026-55734
Fix available
6.9 Medium
-
hashgraph guardian
Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation
CVE-2026-55733
Fix available
6.9 Medium
-
hashgraph guardian
Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation
CVE-2026-55735
Fix available
8.2 High
-
hashgraph guardian
Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys
CVE-2026-54894
Fix available
6.9 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0
CVE-2026-33390
7.2 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
DoS through oversized audit log entries in Guardian/CMC before 26.2.0
CVE-2026-31984
8.7 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
CVE-2026-31983
6.9 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0
CVE-2026-31982
5.3 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0
CVE-2026-31981
4.8 Medium
-
hashgraph guardian
Hashgraph Guardian Stored XSS via branding companyName field
CVE-2026-22674
4.8 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Smart Polling in Guardian/CMC before 26.1.0
CVE-2025-40904
5.1 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0
CVE-2025-40903
4.8 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Users in Guardian/CMC before 26.1.0
CVE-2025-40902
4.8 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Credentials Manager in Guardian/CMC before 26.1.0
CVE-2025-40901
4.8 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Angular template injection in Reports in Guardian/CMC before 26.1.0
CVE-2025-40900
5.1 Medium
-
hashgraph guardian
Hedera Guardian Authentication Bypass Information Disclosure
CVE-2026-45248
6.9 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0
CVE-2025-40899
7.1 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0
CVE-2025-40897
7.2 High
-
hashgraph guardian
Hashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE
CVE-2026-39911
8.7 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0
CVE-2025-40894
2.1 Low
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0
CVE-2025-40898
7.2 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in Asset List in Guardian/CMC before 25.5.0
CVE-2025-40893
5.3 Medium
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0
CVE-2025-40892
7.1 High
-
hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 more
HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0
CVE-2025-40891
2.3 Low
-
hashgraph guardian, nozomi networks cmc +1 more
Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0
CVE-2025-40890
5.8 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0
CVE-2025-40888
6.0 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0
CVE-2025-40889
7.2 High
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
CVE-2025-40887
6.0 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
CVE-2025-40886
7.7 High
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
CVE-2025-40885
6.0 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
Incorrect authorization for CLI in Guardian/CMC before 25.2.0
CVE-2025-3719
7.2 High
-
hashgraph guardian, nozomi networks cmc +1 more
Client-side path traversal in Guardian/CMC before 25.2.0
CVE-2025-3718
5.8 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
Privilege escalation in Guardian/CMC before 24.6.0
CVE-2024-13090
7.3 High
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated RCE in update functionality in Guardian/CMC before 24.6.0
CVE-2024-13089
7.5 High
-
hashgraph guardian, nozomi networks cmc +1 more
Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0
CVE-2024-4465
5.8 Medium
-
hashgraph guardian
DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
CVE-2024-0218
8.2 High
-
hashgraph guardian, nozomi networks cmc, nozominetworks central management control +2 more
Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1
CVE-2023-6916
7.5 High
-
hashgraph guardian, nozomi networks cmc +1 more
Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0
CVE-2023-5253
6.3 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
CVE-2023-32649
8.2 High
-
hashgraph guardian, nozomi networks cmc +1 more
SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
CVE-2023-29245
9.2 Critical
-
hashgraph guardian, nozomi networks cmc +1 more
Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0
CVE-2023-2567
8.7 High
-
hashgraph guardian, nozomi networks cmc +1 more
DoS via SAML configuration in Guardian/CMC before 22.6.2
CVE-2023-23903
6.9 Medium
-
hashgraph guardian, nozomi networks cmc +1 more
Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
CVE-2023-24015
5.3 Medium
- Show olderLoading…