← All credits
This issue was found by Andrea Palanca of Nozomi Networks Product Security team during an internal investigation.
17 vulnerability records and advisories credit this contributor.
CVE-2026-31985
Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
CVE-2025-40885
Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0
CVE-2025-3719
Incorrect authorization for CLI in Guardian/CMC before 25.2.0
CVE-2025-40886
Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
CVE-2025-40887
Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
CVE-2025-40889
Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0
CVE-2025-40888
Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0