Quick answers
- Is CVE-2026-33389 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-33389 being exploited in the wild.
- How severe is CVE-2026-33389?
- High severity, with a CVSS score of 4.6, published 8 September 2026.
- Which products and versions are affected?
- Nozomi Networks Guardian before 26.3.0.
- Is there a fix for CVE-2026-33389?
- A patch was published on 2026-09-08: Fix available in Guardian/CMC v26.3.0 and later Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-33389 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-33389?
- Check whether you run Nozomi Networks Guardian at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A template injection vulnerability (CWE-1336) exists in the Dashboards functionality due to improper sanitization of input parameters. An authenticated user with sufficient privileges can craft a malicious dashboard payload or trick a victim into importing one. When the victim views or imports the dashboard, the unsanitized template code executes in the browser context, allowing the attacker to modify application data or disrupt availability. The vulnerability requires authentication and user interaction (viewing or importing the dashboard). Patches are available in Guardian/CMC version 26.3.0 and later.
Affected products
- Nozomi Networks Guardian before 26.3.0
- Nozomi Networks CMC before 26.3.0
Identifiers
- CVE-2026-33389
- CVE-2026-33387
- CVE-2026-33920
- CVE-2026-33391
- CVE-2026-33388
Timeline
- 2026-09-08: disclosed: CVE-2026-33387 published
- 2026-09-08: patched: Fix available in Guardian/CMC v26.3.0 and later