{"schema_version":1,"title":"Nozomi Networks vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 17 vulnerabilities in Nozomi Networks: 0 in the last 7 days and 11 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-33920, was published on 8 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/nozomi-networks","json_url":"https://junglewise.ai/threats/vendors/nozomi-networks.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/nozomi-networks","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":8,"all_time":17,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":5,"last_90_days":11,"last_365_days":17},"latest":[{"cve":"CVE-2026-33920","cvss":3.5,"epss":0.0013,"slug":"cve-2026-33920-nozomi-networks-guardian-and-cmc-cross-site-request-forgery-in","title":"Nozomi Networks Guardian and CMC cross-site request forgery in login","severity":"low","exploited":false,"published_at":"2026-09-08T14:17:22.687+00:00","url":"https://junglewise.ai/threats/cve-2026-33920-nozomi-networks-guardian-and-cmc-cross-site-request-forgery-in"},{"cve":"CVE-2026-33391","cvss":5.4,"epss":0.0034,"slug":"cve-2026-33391-nozomi-guardian-cmc-incorrect-authorization-in-smart-polling","title":"Nozomi Guardian/CMC incorrect authorization in Smart Polling configuration","severity":"medium","exploited":false,"published_at":"2026-09-08T14:17:22.547+00:00","url":"https://junglewise.ai/threats/cve-2026-33391-nozomi-guardian-cmc-incorrect-authorization-in-smart-polling"},{"cve":"CVE-2026-33389","cvss":7.5,"epss":0.0016,"slug":"cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate","title":"Nozomi Networks Guardian/CMC and Arc improper certificate validation in Smart Polling","severity":"high","exploited":false,"published_at":"2026-09-08T14:17:22.39+00:00","url":"https://junglewise.ai/threats/cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate"},{"cve":"CVE-2026-33388","cvss":7.4,"epss":0.004,"slug":"cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in","title":"Nozomi Networks Guardian/CMC incorrect authorization in Credentials Manager","severity":"high","exploited":false,"published_at":"2026-09-08T14:17:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in"},{"cve":"CVE-2026-33387","cvss":4.6,"epss":0.0025,"slug":"cve-2026-33387-nozomi-networks-guardian-cmc-template-injection-in-dashboards","title":"Nozomi Networks Guardian/CMC template injection in Dashboards","severity":"medium","exploited":false,"published_at":"2026-09-08T14:17:22.05+00:00","url":"https://junglewise.ai/threats/cve-2026-33387-nozomi-networks-guardian-cmc-template-injection-in-dashboards"},{"cve":"CVE-2026-33390","cvss":8.1,"slug":"cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc","title":"Nozomi Networks Guardian and CMC privilege escalation in Arc sensors","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:48.233+00:00","url":"https://junglewise.ai/threats/cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc"},{"cve":"CVE-2026-31985","cvss":8.1,"slug":"cve-2026-31985-nozomi-networks-remote-collector-disabled-tls-verification-in","title":"Nozomi Networks Remote Collector disabled TLS verification in n2os-tui","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:48.083+00:00","url":"https://junglewise.ai/threats/cve-2026-31985-nozomi-networks-remote-collector-disabled-tls-verification-in"},{"cve":"CVE-2026-31984","cvss":7.5,"slug":"cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit","title":"Nozomi Networks Guardian and CMC denial of service in audit logging","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:47.94+00:00","url":"https://junglewise.ai/threats/cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit"},{"cve":"CVE-2026-31983","cvss":5.3,"slug":"cve-2026-31983-nozomi-networks-guardian-and-cmc-missing-authentication-in-ssh","title":"Nozomi Networks Guardian and CMC missing authentication in SSH keys endpoint","severity":"medium","exploited":false,"published_at":"2026-07-09T08:16:47.8+00:00","url":"https://junglewise.ai/threats/cve-2026-31983-nozomi-networks-guardian-and-cmc-missing-authentication-in-ssh"},{"cve":"CVE-2026-31982","cvss":7.1,"slug":"cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso","title":"Nozomi Networks Guardian and CMC open redirect in SAML SSO","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:47.65+00:00","url":"https://junglewise.ai/threats/cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso"},{"cve":"CVE-2026-31981","cvss":5.9,"slug":"cve-2026-31981-nozomi-networks-guardian-and-cmc-stored-html-injection","title":"Nozomi Networks Guardian and CMC Stored HTML Injection","severity":"medium","exploited":false,"published_at":"2026-07-09T08:16:47.483+00:00","url":"https://junglewise.ai/threats/cve-2026-31981-nozomi-networks-guardian-and-cmc-stored-html-injection"},{"cve":"CVE-2025-40904","cvss":6.5,"slug":"cve-2025-40904-nozomi-networks-guardian-and-cmc-html-injection-in-smart-polling","title":"Nozomi Networks Guardian and CMC HTML injection in Smart Polling","severity":"medium","exploited":false,"published_at":"2026-05-19T14:16:28.293+00:00","url":"https://junglewise.ai/threats/cve-2025-40904-nozomi-networks-guardian-and-cmc-html-injection-in-smart-polling"},{"cve":"CVE-2025-40903","cvss":5.9,"slug":"cve-2025-40903-nozomi-networks-guardian-and-cmc-html-injection-in-schedule","title":"Nozomi Networks Guardian and CMC HTML injection in Schedule Restore Archive","severity":"medium","exploited":false,"published_at":"2026-05-19T14:16:28.13+00:00","url":"https://junglewise.ai/threats/cve-2025-40903-nozomi-networks-guardian-and-cmc-html-injection-in-schedule"},{"cve":"CVE-2025-40902","cvss":5.9,"slug":"cve-2025-40902-nozomi-networks-guardian-and-cmc-html-injection-in-users","title":"Nozomi Networks Guardian and CMC HTML injection in Users functionality","severity":"medium","exploited":false,"published_at":"2026-05-19T14:16:27.96+00:00","url":"https://junglewise.ai/threats/cve-2025-40902-nozomi-networks-guardian-and-cmc-html-injection-in-users"},{"cve":"CVE-2025-40900","cvss":4.6,"slug":"cve-2025-40900-nozomi-networks-guardian-and-cmc-angular-template-injection-in","title":"Nozomi Networks Guardian and CMC Angular template injection in Reports","severity":"medium","exploited":false,"published_at":"2026-05-19T14:16:27.56+00:00","url":"https://junglewise.ai/threats/cve-2025-40900-nozomi-networks-guardian-and-cmc-angular-template-injection-in"},{"cve":"CVE-2025-40899","cvss":8.9,"slug":"cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes","title":"Nozomi Networks Guardian and CMC stored XSS in Assets and Nodes","severity":"high","exploited":false,"published_at":"2026-04-15T09:16:30.837+00:00","url":"https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes"},{"cve":"CVE-2025-40897","cvss":8.1,"slug":"cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in","title":"Nozomi Networks Guardian and CMC incorrect authorization in Threat Intelligence","severity":"high","exploited":false,"published_at":"2026-04-15T09:16:29.777+00:00","url":"https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in"}],"vendor":{"hub":true,"name":"Nozomi Networks","slug":"nozomi-networks","homepage":"https://www.nozominetworks.com/","description":"A cybersecurity company specializing in industrial control systems (ICS) and operational technology (OT) security.","url":"https://junglewise.ai/threats/vendors/nozomi-networks"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-40899","cvss":8.9,"slug":"cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes","title":"Nozomi Networks Guardian and CMC stored XSS in Assets and Nodes","severity":"high","exploited":false,"published_at":"2026-04-15T09:16:30.837+00:00","url":"https://junglewise.ai/threats/cve-2025-40899-nozomi-networks-guardian-and-cmc-stored-xss-in-assets-and-nodes"},{"cve":"CVE-2026-33390","cvss":8.1,"slug":"cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc","title":"Nozomi Networks Guardian and CMC privilege escalation in Arc sensors","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:48.233+00:00","url":"https://junglewise.ai/threats/cve-2026-33390-nozomi-networks-guardian-and-cmc-privilege-escalation-in-arc"},{"cve":"CVE-2026-31985","cvss":8.1,"slug":"cve-2026-31985-nozomi-networks-remote-collector-disabled-tls-verification-in","title":"Nozomi Networks Remote Collector disabled TLS verification in n2os-tui","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:48.083+00:00","url":"https://junglewise.ai/threats/cve-2026-31985-nozomi-networks-remote-collector-disabled-tls-verification-in"},{"cve":"CVE-2025-40897","cvss":8.1,"slug":"cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in","title":"Nozomi Networks Guardian and CMC incorrect authorization in Threat Intelligence","severity":"high","exploited":false,"published_at":"2026-04-15T09:16:29.777+00:00","url":"https://junglewise.ai/threats/cve-2025-40897-nozomi-networks-guardian-and-cmc-incorrect-authorization-in"},{"cve":"CVE-2026-33389","cvss":7.5,"epss":0.0016,"slug":"cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate","title":"Nozomi Networks Guardian/CMC and Arc improper certificate validation in Smart Polling","severity":"high","exploited":false,"published_at":"2026-09-08T14:17:22.39+00:00","url":"https://junglewise.ai/threats/cve-2026-33389-nozomi-networks-guardian-cmc-and-arc-improper-certificate"},{"cve":"CVE-2026-31984","cvss":7.5,"slug":"cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit","title":"Nozomi Networks Guardian and CMC denial of service in audit logging","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:47.94+00:00","url":"https://junglewise.ai/threats/cve-2026-31984-nozomi-networks-guardian-and-cmc-denial-of-service-in-audit"},{"cve":"CVE-2026-33388","cvss":7.4,"epss":0.004,"slug":"cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in","title":"Nozomi Networks Guardian/CMC incorrect authorization in Credentials Manager","severity":"high","exploited":false,"published_at":"2026-09-08T14:17:22.21+00:00","url":"https://junglewise.ai/threats/cve-2026-33388-nozomi-networks-guardian-cmc-incorrect-authorization-in"},{"cve":"CVE-2026-31982","cvss":7.1,"slug":"cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso","title":"Nozomi Networks Guardian and CMC open redirect in SAML SSO","severity":"high","exploited":false,"published_at":"2026-07-09T08:16:47.65+00:00","url":"https://junglewise.ai/threats/cve-2026-31982-nozomi-networks-guardian-and-cmc-open-redirect-in-saml-sso"},{"cve":"CVE-2025-40904","cvss":6.5,"slug":"cve-2025-40904-nozomi-networks-guardian-and-cmc-html-injection-in-smart-polling","title":"Nozomi Networks Guardian and CMC HTML injection in Smart Polling","severity":"medium","exploited":false,"published_at":"2026-05-19T14:16:28.293+00:00","url":"https://junglewise.ai/threats/cve-2025-40904-nozomi-networks-guardian-and-cmc-html-injection-in-smart-polling"},{"cve":"CVE-2026-31981","cvss":5.9,"slug":"cve-2026-31981-nozomi-networks-guardian-and-cmc-stored-html-injection","title":"Nozomi Networks Guardian and CMC Stored HTML Injection","severity":"medium","exploited":false,"published_at":"2026-07-09T08:16:47.483+00:00","url":"https://junglewise.ai/threats/cve-2026-31981-nozomi-networks-guardian-and-cmc-stored-html-injection"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Nozomi Networks Guardian","slug":"guardian","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/guardian"},{"name":"Nozomi Networks Central Management Console","slug":"central-management-console","vulnerabilities":16,"url":"https://junglewise.ai/threats/technologies/central-management-console"}]}