Skip to contentNozomi Networks vulnerabilities
Newest
- basekick-labs arcArc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735CVE-2026-55098Fix available6.5 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE in update functionality in Guardian/CMC before 26.4.0CVE-2026-339247.5 High
- hashgraph guardian, nozomi networks cmc +1 moreUpdate bundle signature bypass in Guardian/CMC before 26.4.0CVE-2026-339237.5 High
- nozomi networks arcAddress Bar Spoof Risk; Missing Fullscreen Notification via Select ElementCVE-2026-941817.4 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreCross-site request forgery in the Guardian/CMC login before 26.3.0CVE-2026-339205.1 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0CVE-2026-333915.3 Medium
- hashgraph guardian, nozomi networks arc, cmc +1 more +3 moreDisabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0CVE-2026-333895.3 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0CVE-2026-333886.4 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreInsufficient sanitization of Dashboards in Guardian/CMC before 26.3.0CVE-2026-333875.1 Medium
- basekick-labs arcArc: Unauthenticated cluster node admission when `cluster.shared_secret` is unsetCVE-2026-55678Fix available6.9 Medium
- basekick-labs arcArc Enterprise cluster replication accepts unauthenticated MsgReplicateSync messages, enabling cluster-wide data injection from any TLS-trusted peerCVE-2026-481068.3 High
- basekick-labs arcArc Enterprise cluster FSM applyRegisterFile accepts arbitrary file paths without validation, enabling cluster-wide path-traversal worm primitiveCVE-2026-481058.3 High
- nozomi networks arcPath traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0CVE-2026-339226.8 Medium
- nozomi networks arcNpcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0CVE-2026-339214.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0CVE-2026-333907.2 High
- nozomi networks remote collectorDisabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0CVE-2026-319858.3 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreDoS through oversized audit log entries in Guardian/CMC before 26.2.0CVE-2026-319848.7 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreMissing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0CVE-2026-319836.9 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreOpen Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0CVE-2026-319825.3 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0CVE-2026-319814.8 Medium
- basekick-labs arcArc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoSCVE-2026-48050Fix available8.8 High
- basekick-labs arcArc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checksCVE-2026-47735Fix available7.1 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Smart Polling in Guardian/CMC before 26.1.0CVE-2025-409045.1 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0CVE-2025-409034.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Users in Guardian/CMC before 26.1.0CVE-2025-409024.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Credentials Manager in Guardian/CMC before 26.1.0CVE-2025-409014.8 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreAngular template injection in Reports in Guardian/CMC before 26.1.0CVE-2025-409005.1 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreStored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0CVE-2025-408997.1 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreIncorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0CVE-2025-408977.2 High
- nozomi networks arcLack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0CVE-2025-408966.3 Medium
- nozomi networks cmcHTML injection in Sensor Map in CMC before 25.6.0CVE-2025-408952.0 Low
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0CVE-2025-408942.1 Low
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 morePath traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0CVE-2025-408987.2 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in Asset List in Guardian/CMC before 25.5.0CVE-2025-408935.3 Medium
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreStored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0CVE-2025-408927.1 High
- hashgraph guardian, nozomi networks cmc, siemens ruggedcom ape1808 +2 moreHTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0CVE-2025-408912.3 Low
- hashgraph guardian, nozomi networks cmc +1 moreStored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0CVE-2025-408905.8 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0CVE-2025-408886.0 Medium
- hashgraph guardian, nozomi networks cmc +1 morePath traversal in Time Machine functionality in Guardian/CMC before 25.2.0CVE-2025-408897.2 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0CVE-2025-408876.0 Medium
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0CVE-2025-408867.7 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0CVE-2025-408856.0 Medium
- hashgraph guardian, nozomi networks cmc +1 moreIncorrect authorization for CLI in Guardian/CMC before 25.2.0CVE-2025-37197.2 High
- hashgraph guardian, nozomi networks cmc +1 moreClient-side path traversal in Guardian/CMC before 25.2.0CVE-2025-37185.8 Medium
- nozomi networks cmcIncorrect authorization for traces request/download in CMC before 25.1.0CVE-2025-15015.3 Medium
- hashgraph guardian, nozomi networks cmc +1 morePrivilege escalation in Guardian/CMC before 24.6.0CVE-2024-130907.3 High
- hashgraph guardian, nozomi networks cmc +1 moreAuthenticated RCE in update functionality in Guardian/CMC before 24.6.0CVE-2024-130897.5 High
- hashgraph guardian, nozomi networks cmc +1 moreIncorrect authorization for Reports configuration in Guardian/CMC before 24.2.0CVE-2024-44655.8 Medium
- nozomi networks arcPath traversal via 'zip slip' in Arc before v1.6.0CVE-2023-59388.9 High
- nozomi networks arcSensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0CVE-2023-59375.2 Medium
- Show olderLoading…