Nozomi Networks
Vulnerability activity for Nozomi Networks: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 3.5LowSep 8, 2026Nozomi Networks Guardian CSRFCVE-2026-33920A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can trick a victim into unknowingly authenticating with the attacker's credentials. Any operation performed
- 5.4MediumSep 8, 2026Nozomi Networks Guardian Auth bypass / access controlCVE-2026-33391An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Pollin
- 7.5HighSep 8, 2026Nozomi Networks GuardianCVE-2026-33389An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker positioned betwe
- 7.4HighSep 8, 2026Nozomi Networks Guardian Auth bypass / access controlCVE-2026-33388An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials Manager. The actual credential values a
- 4.6MediumSep 8, 2026Nozomi Networks Guardian Code / command injectionCVE-2026-33387A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a dashboard containing a malicious payload, or a victim can be socially engineered into importing a malici
Top products
- Guardian5 CVEs in the last year
Advisories
Official advisories from the last 90 days that name this vendor's CVEs.
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.