# Nozomi Networks Central Management Console vulnerabilities Source: https://junglewise.ai/threats/technologies/central-management-console Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/central-management-console.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 18 vulnerabilities in Nozomi Networks Central Management Console: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-33924, was published on 29 October 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 7 - All time: 18 (0 critical, 0 exploited in the wild) ## About Nozomi Networks Central Management Console Central Management Console is an administrative interface for Nozomi Networks products. ## Latest Nozomi Networks Central Management Console vulnerabilities - [CVE-2026-33924: Nozomi Networks Guardian/CMC OS command injection in update installer](https://junglewise.ai/threats/cve-2026-33924-two-os-command-injection-vulnerabilities-were-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-33923: Nozomi Networks Guardian/CMC update signature bypass](https://junglewise.ai/threats/cve-2026-33923-a-signature-verification-vulnerability-was-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-33920: Nozomi Networks Guardian and CMC cross-site request forgery in login](https://junglewise.ai/threats/cve-2026-33920-nozomi-networks-guardian-and-cmc-cross-site-request-forgery-in) (low, CVSS 3.5, published 8 Sep 2026) - [CVE-2026-33391: Nozomi Guardian/CMC incorrect authorization in Smart Polling configuration](https://junglewise.ai/threats/cve-2026-33391-nozomi-guardian-cmc-incorrect-authorization-in-smart-polling) (medium, CVSS 5.4, published 8 Sep 2026) - [CVE-2026-33389: Nozomi Networks Guardian/CMC and Arc improper certificate validation in Smart Polling](https://junglewise.ai/threats/cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate) (high, CVSS 7.5, published 8 Sep 2026) - [CVE-2026-33388: Nozomi Networks Guardian/CMC incorrect authorization in Credentials Manager](https://junglewise.ai/threats/cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in) (high, CVSS 7.4, published 8 Sep 2026) - [CVE-2026-33387: Nozomi Networks Guardian/CMC template injection in Dashboards](https://junglewise.ai/threats/cve-2026-33387-nozomi-networks-guardian-cmc-template-injection-in-dashboards) (high, CVSS 4.6, published 8 Sep 2026) - [CVE-2026-33390: Nozomi Networks Guardian and CMC privilege escalation in Arc sensors](https://junglewise.ai/threats/cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc) (high, CVSS 8.1, published 9 Jul 2026) - [CVE-2026-31984: Nozomi Networks Guardian and CMC denial of service in audit logging](https://junglewise.ai/threats/cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit) (high, CVSS 7.5, published 9 Jul 2026) - [CVE-2026-31983: Nozomi Networks Guardian and CMC missing authentication in SSH keys endpoint](https://junglewise.ai/threats/cve-2026-31983-nozomi-networks-guardian-and-cmc-missing-authentication-in-ssh) (medium, CVSS 5.3, published 9 Jul 2026) - [CVE-2026-31982: Nozomi Networks Guardian and CMC open redirect in SAML SSO](https://junglewise.ai/threats/cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso) (high, CVSS 7.1, published 9 Jul 2026) - [CVE-2026-31981: Nozomi Networks Guardian and CMC Stored HTML Injection](https://junglewise.ai/threats/cve-2026-31981-nozomi-networks-guardian-and-cmc-stored-html-injection) (medium, CVSS 5.9, published 9 Jul 2026) - [CVE-2025-40904: Nozomi Networks Guardian and CMC HTML injection in Smart Polling](https://junglewise.ai/threats/cve-2025-40904-nozomi-networks-guardian-and-cmc-html-injection-in-smart-polling) (medium, CVSS 6.5, published 19 May 2026) - [CVE-2025-40903: Nozomi Networks Guardian and CMC HTML injection in Schedule Restore Archive](https://junglewise.ai/threats/cve-2025-40903-nozomi-networks-guardian-and-cmc-html-injection-in-schedule) (medium, CVSS 5.9, published 19 May 2026) - [CVE-2025-40902: Nozomi Networks Guardian and CMC HTML injection in Users functionality](https://junglewise.ai/threats/cve-2025-40902-nozomi-networks-guardian-and-cmc-html-injection-in-users) (medium, CVSS 5.9, published 19 May 2026) - [CVE-2025-40900: Nozomi Networks Guardian and CMC Angular template injection in Reports](https://junglewise.ai/threats/cve-2025-40900-nozomi-networks-guardian-and-cmc-angular-template-injection-in) (medium, CVSS 4.6, published 19 May 2026) - [CVE-2025-40899: Nozomi Networks Guardian and CMC stored XSS in Assets and Nodes](https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes) (high, CVSS 8.9, published 15 Apr 2026) - [CVE-2025-40897: Nozomi Networks Guardian and CMC incorrect authorization in Threat Intelligence](https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in) (high, CVSS 8.1, published 15 Apr 2026) ## Most severe Nozomi Networks Central Management Console vulnerabilities - [CVE-2025-40899: Nozomi Networks Guardian and CMC stored XSS in Assets and Nodes](https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes) (high, CVSS 8.9, published 15 Apr 2026) - [CVE-2026-33390: Nozomi Networks Guardian and CMC privilege escalation in Arc sensors](https://junglewise.ai/threats/cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc) (high, CVSS 8.1, published 9 Jul 2026) - [CVE-2025-40897: Nozomi Networks Guardian and CMC incorrect authorization in Threat Intelligence](https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in) (high, CVSS 8.1, published 15 Apr 2026) - [CVE-2026-33389: Nozomi Networks Guardian/CMC and Arc improper certificate validation in Smart Polling](https://junglewise.ai/threats/cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate) (high, CVSS 7.5, published 8 Sep 2026) - [CVE-2026-31984: Nozomi Networks Guardian and CMC denial of service in audit logging](https://junglewise.ai/threats/cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit) (high, CVSS 7.5, published 9 Jul 2026) - [CVE-2026-33388: Nozomi Networks Guardian/CMC incorrect authorization in Credentials Manager](https://junglewise.ai/threats/cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in) (high, CVSS 7.4, published 8 Sep 2026) - [CVE-2026-33924: Nozomi Networks Guardian/CMC OS command injection in update installer](https://junglewise.ai/threats/cve-2026-33924-two-os-command-injection-vulnerabilities-were-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-33923: Nozomi Networks Guardian/CMC update signature bypass](https://junglewise.ai/threats/cve-2026-33923-a-signature-verification-vulnerability-was-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-31982: Nozomi Networks Guardian and CMC open redirect in SAML SSO](https://junglewise.ai/threats/cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso) (high, CVSS 7.1, published 9 Jul 2026) - [CVE-2026-33387: Nozomi Networks Guardian/CMC template injection in Dashboards](https://junglewise.ai/threats/cve-2026-33387-nozomi-networks-guardian-cmc-template-injection-in-dashboards) (high, CVSS 4.6, published 8 Sep 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 5 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 2 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Nozomi Networks technologies - [Nozomi Networks Guardian](https://junglewise.ai/threats/technologies/guardian): 23 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Nozomi Networks Central Management Console vulnerabilities", https://junglewise.ai/threats/technologies/central-management-console, 9 November 2026.