← All credits
This issue was found by Andrea Palanca of Nozomi Networks Product Security team during an internal investigation.
17 vulnerability records and advisories credit this contributor.
CVE-2026-33923
Update bundle signature bypass in Guardian/CMC before 26.4.0
CVE-2026-33387
Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
CVE-2026-33922
Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0
CVE-2026-33390
Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0
CVE-2026-31984
DoS through oversized audit log entries in Guardian/CMC before 26.2.0
CVE-2026-31983
Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
CVE-2026-31982
Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0
CVE-2025-40899
Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0
CVE-2025-40898
Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0
CVE-2025-40897
Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0