Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Nozomi Networks CMC, Guardian 26.2.0 Clear all filters
TI-2026-24526 CVE-2026-31984 · GHSA-4jrp-wrhh-5622

DoS through oversized audit log entries in Guardian/CMC before 26.2.0

Priority MEDIUM 44

A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00509 Published 2026-07-09 Fixed in 26.2.0 CWE-770
TI-2026-24524 CVE-2026-31982 · GHSA-mhgm-6mc5-8v9j

Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0

Priority LOW 24

An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00308 Published 2026-07-09 Fixed in 26.2.0 CWE-601
TI-2026-24523 CVE-2026-31981 · GHSA-5g4m-c643-h8fj

HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0

Priority LOW 22

A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input validation function being insufficiently restrictive.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00251 Published 2026-07-09 Fixed in 26.2.0 CWE-79