# Nozomi Networks Guardian vulnerabilities Source: https://junglewise.ai/threats/technologies/guardian Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/guardian.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 23 vulnerabilities in Nozomi Networks Guardian: 0 in the last 7 days and 7 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-33924, was published on 29 October 2026. 2 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 2 - Last 90 days: 7 - All time: 23 (0 critical, 0 exploited in the wild) ## About Nozomi Networks Guardian Cybersecurity platform for detecting and responding to threats in critical infrastructure. ## Latest Nozomi Networks Guardian vulnerabilities - [CVE-2026-33924: Nozomi Networks Guardian/CMC OS command injection in update installer](https://junglewise.ai/threats/cve-2026-33924-two-os-command-injection-vulnerabilities-were-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-33923: Nozomi Networks Guardian/CMC update signature bypass](https://junglewise.ai/threats/cve-2026-33923-a-signature-verification-vulnerability-was-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-33920: Nozomi Networks Guardian and CMC cross-site request forgery in login](https://junglewise.ai/threats/cve-2026-33920-nozomi-networks-guardian-and-cmc-cross-site-request-forgery-in) (low, CVSS 3.5, published 8 Sep 2026) - [CVE-2026-33391: Nozomi Guardian/CMC incorrect authorization in Smart Polling configuration](https://junglewise.ai/threats/cve-2026-33391-nozomi-guardian-cmc-incorrect-authorization-in-smart-polling) (medium, CVSS 5.4, published 8 Sep 2026) - [CVE-2026-33389: Nozomi Networks Guardian/CMC and Arc improper certificate validation in Smart Polling](https://junglewise.ai/threats/cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate) (high, CVSS 7.5, published 8 Sep 2026) - [CVE-2026-33388: Nozomi Networks Guardian/CMC incorrect authorization in Credentials Manager](https://junglewise.ai/threats/cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in) (high, CVSS 7.4, published 8 Sep 2026) - [CVE-2026-33387: Nozomi Networks Guardian/CMC template injection in Dashboards](https://junglewise.ai/threats/cve-2026-33387-nozomi-networks-guardian-cmc-template-injection-in-dashboards) (high, CVSS 4.6, published 8 Sep 2026) - [CVE-2026-55735: Guardian cryptographic signature verification bypass in revoke](https://junglewise.ai/threats/cve-2026-55735-guardian-cryptographic-signature-verification-bypass-in-revoke) (high, CVSS 7.5, published 1 Aug 2026) - [CVE-2026-33390: Nozomi Networks Guardian and CMC privilege escalation in Arc sensors](https://junglewise.ai/threats/cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc) (high, CVSS 8.1, published 9 Jul 2026) - [CVE-2026-31984: Nozomi Networks Guardian and CMC denial of service in audit logging](https://junglewise.ai/threats/cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit) (high, CVSS 7.5, published 9 Jul 2026) - [CVE-2026-31983: Nozomi Networks Guardian and CMC missing authentication in SSH keys endpoint](https://junglewise.ai/threats/cve-2026-31983-nozomi-networks-guardian-and-cmc-missing-authentication-in-ssh) (medium, CVSS 5.3, published 9 Jul 2026) - [CVE-2026-31982: Nozomi Networks Guardian and CMC open redirect in SAML SSO](https://junglewise.ai/threats/cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso) (high, CVSS 7.1, published 9 Jul 2026) - [CVE-2026-31981: Nozomi Networks Guardian and CMC Stored HTML Injection](https://junglewise.ai/threats/cve-2026-31981-nozomi-networks-guardian-and-cmc-stored-html-injection) (medium, CVSS 5.9, published 9 Jul 2026) - [CVE-2026-22674: Hashgraph Guardian stored XSS in branding configuration](https://junglewise.ai/threats/cve-2026-22674-hashgraph-guardian-stored-xss-in-branding-configuration) (medium, CVSS 4.8, published 18 Jun 2026) - [CVE-2025-40904: Nozomi Networks Guardian and CMC HTML injection in Smart Polling](https://junglewise.ai/threats/cve-2025-40904-nozomi-networks-guardian-and-cmc-html-injection-in-smart-polling) (medium, CVSS 6.5, published 19 May 2026) - [CVE-2025-40903: Nozomi Networks Guardian and CMC HTML injection in Schedule Restore Archive](https://junglewise.ai/threats/cve-2025-40903-nozomi-networks-guardian-and-cmc-html-injection-in-schedule) (medium, CVSS 5.9, published 19 May 2026) - [CVE-2025-40902: Nozomi Networks Guardian and CMC HTML injection in Users functionality](https://junglewise.ai/threats/cve-2025-40902-nozomi-networks-guardian-and-cmc-html-injection-in-users) (medium, CVSS 5.9, published 19 May 2026) - [CVE-2025-40901: Nozomi Networks Guardian and CMC HTML injection in Credentials Manager](https://junglewise.ai/threats/cve-2025-40901-nozomi-networks-guardian-and-cmc-html-injection-in-credentials) (medium, CVSS 5.9, published 19 May 2026) - [CVE-2025-40900: Nozomi Networks Guardian and CMC Angular template injection in Reports](https://junglewise.ai/threats/cve-2025-40900-nozomi-networks-guardian-and-cmc-angular-template-injection-in) (medium, CVSS 4.6, published 19 May 2026) - [CVE-2026-45248: Hedera Guardian authentication bypass in demo registered-users endpoint](https://junglewise.ai/threats/cve-2026-45248-hedera-guardian-authentication-bypass-in-demo-registered-users) (medium, CVSS 5.3, published 14 May 2026) - [CVE-2025-40899: Nozomi Networks Guardian and CMC stored XSS in Assets and Nodes](https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes) (high, CVSS 8.9, published 15 Apr 2026) - [CVE-2025-40897: Nozomi Networks Guardian and CMC incorrect authorization in Threat Intelligence](https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in) (high, CVSS 8.1, published 15 Apr 2026) - [CVE-2026-39911: Hashgraph Guardian arbitrary code execution in Custom Logic worker](https://junglewise.ai/threats/cve-2026-39911-hashgraph-guardian-arbitrary-code-execution-in-custom-logic) (high, CVSS 8.8, published 9 Apr 2026) ## Most severe Nozomi Networks Guardian vulnerabilities - [CVE-2025-40899: Nozomi Networks Guardian and CMC stored XSS in Assets and Nodes](https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes) (high, CVSS 8.9, published 15 Apr 2026) - [CVE-2026-39911: Hashgraph Guardian arbitrary code execution in Custom Logic worker](https://junglewise.ai/threats/cve-2026-39911-hashgraph-guardian-arbitrary-code-execution-in-custom-logic) (high, CVSS 8.8, published 9 Apr 2026) - [CVE-2026-33390: Nozomi Networks Guardian and CMC privilege escalation in Arc sensors](https://junglewise.ai/threats/cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc) (high, CVSS 8.1, published 9 Jul 2026) - [CVE-2025-40897: Nozomi Networks Guardian and CMC incorrect authorization in Threat Intelligence](https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in) (high, CVSS 8.1, published 15 Apr 2026) - [CVE-2026-55735: Guardian cryptographic signature verification bypass in revoke](https://junglewise.ai/threats/cve-2026-55735-guardian-cryptographic-signature-verification-bypass-in-revoke) (high, CVSS 7.5, published 1 Aug 2026) - [CVE-2026-33389: Nozomi Networks Guardian/CMC and Arc improper certificate validation in Smart Polling](https://junglewise.ai/threats/cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate) (high, CVSS 7.5, published 8 Sep 2026) - [CVE-2026-31984: Nozomi Networks Guardian and CMC denial of service in audit logging](https://junglewise.ai/threats/cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit) (high, CVSS 7.5, published 9 Jul 2026) - [CVE-2026-33388: Nozomi Networks Guardian/CMC incorrect authorization in Credentials Manager](https://junglewise.ai/threats/cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in) (high, CVSS 7.4, published 8 Sep 2026) - [CVE-2026-33924: Nozomi Networks Guardian/CMC OS command injection in update installer](https://junglewise.ai/threats/cve-2026-33924-two-os-command-injection-vulnerabilities-were-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) - [CVE-2026-33923: Nozomi Networks Guardian/CMC update signature bypass](https://junglewise.ai/threats/cve-2026-33923-a-signature-verification-vulnerability-was-discovered-in-the) (high, CVSS 7.2, published 29 Oct 2026) ## Vulnerabilities per week 2 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 5 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 2 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Nozomi Networks technologies - [Nozomi Networks Central Management Console](https://junglewise.ai/threats/technologies/central-management-console): 18 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Nozomi Networks Guardian vulnerabilities", https://junglewise.ai/threats/technologies/guardian, 9 November 2026.