CVE-2026-31983: Nozomi Networks Guardian and CMC missing authentication in SSH keys endpoint

CVE-2026-31983 · Severity: medium · CVSS 5.3 · Published 2026-07-09

Nozomi Networks Guardian and CMC, which are used for industrial network monitoring and management, contain a security flaw in their SSH key management system. An unauthorized person can access a specific web address to download a list of system users, their group memberships, and their public SSH keys. This information could be used by an attacker to map out the internal user structure and plan further targeted attacks against the organization's infrastructure.

Technologies: Nozomi Networks Guardian. Vendors: Nozomi Networks.

Quick answers

Is CVE-2026-31983 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-31983 being exploited in the wild.
How severe is CVE-2026-31983?
Medium severity, with a CVSS score of 5.3, published 9 July 2026.
Which products and versions are affected?
Nozomi Networks Guardian < 26.2.0.
Is there a fix for CVE-2026-31983?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-31983 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-31983?
Check whether you run Nozomi Networks Guardian at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A Missing Authentication vulnerability (CWE-306) exists in the SSH keys synchronization endpoint of Nozomi Networks Guardian and CMC. The vulnerability is located in the web management interface and can be reached over the network without any prior authentication or user interaction. By sending a specially crafted request to this endpoint, an unauthenticated attacker can retrieve sensitive metadata including usernames, group associations, and public SSH keys. This information disclosure facilitates reconnaissance for further exploitation. The issue is resolved in version 26.2.0; as a workaround, users are advised to restrict access to the management interface using firewall rules.

Affected products

  • Nozomi Networks Guardian < 26.2.0
  • Nozomi Networks CMC < 26.2.0

Timeline

  • 2026-07-07: advisory: Initial internal advisory published by Nozomi Networks
  • 2026-07-09: disclosed: CVE published in NVD dataset

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.