Quick answers
- Is CVE-2026-33924 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-33924 being exploited in the wild.
- How severe is CVE-2026-33924?
- High severity, with a CVSS score of 7.2, published 29 October 2026.
- Which products and versions are affected?
- Nozomi Networks CMC before 26.4.0; Nozomi Networks Guardian before 26.4.0.
- Is there a fix for CVE-2026-33924?
- Yes: fixed in Guardian 26.4.0, CMC 26.4.0. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
- How is CVE-2026-33924 attacked?
- It is attacked over the network, in a network appliance.
- Am I affected by CVE-2026-33924?
- Check whether you run Nozomi Networks CMC or Nozomi Networks Guardian at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
How to fix
- Fixed in: Guardian 26.4.0, CMC 26.4.0
Technical details
Two OS command injection vulnerabilities (CWE-78) exist in the update installation functionality due to insufficient validation of update bundle contents. An authenticated attacker with administrative privileges can craft a malicious update bundle that, when installed, executes arbitrary OS commands with root privileges. No user interaction is required; the attacker only needs valid admin credentials and network access to the appliance.
Affected products
- Nozomi Networks Guardian before 26.4.0
- Nozomi Networks CMC before 26.4.0
Timeline
- 2026-10-29: disclosed