<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: nozomi-networks-guardian</title><description>Every new CVE for nozomi-networks-guardian.</description><link>https://agentprime.io/</link><item><title>CVE-2026-33924: Authenticated RCE in update functionality in Guardian/CMC before 26.4.0</title><link>https://agentprime.io/advisories/CVE-2026-33924/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33924/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 10:46:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33923: Update bundle signature bypass in Guardian/CMC before 26.4.0</title><link>https://agentprime.io/advisories/CVE-2026-33923/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33923/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 10:46:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33920: Cross-site request forgery in the Guardian/CMC login before 26.3.0</title><link>https://agentprime.io/advisories/CVE-2026-33920/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33920/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 13:57:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33391: Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.0</title><link>https://agentprime.io/advisories/CVE-2026-33391/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33391/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 13:56:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33389: Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0</title><link>https://agentprime.io/advisories/CVE-2026-33389/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33389/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 13:55:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33388: Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0</title><link>https://agentprime.io/advisories/CVE-2026-33388/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33388/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 13:53:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33387: Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0</title><link>https://agentprime.io/advisories/CVE-2026-33387/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33387/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 08 Sep 2026 13:50:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-33390: Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0</title><link>https://agentprime.io/advisories/CVE-2026-33390/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-33390/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 07:23:30 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31984: DoS through oversized audit log entries in Guardian/CMC before 26.2.0</title><link>https://agentprime.io/advisories/CVE-2026-31984/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31984/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 07:22:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31983: Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0</title><link>https://agentprime.io/advisories/CVE-2026-31983/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31983/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 07:22:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31982: Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0</title><link>https://agentprime.io/advisories/CVE-2026-31982/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31982/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 07:22:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-31981: HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0</title><link>https://agentprime.io/advisories/CVE-2026-31981/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-31981/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Jul 2026 07:22:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40904: HTML injection in Smart Polling in Guardian/CMC before 26.1.0</title><link>https://agentprime.io/advisories/CVE-2025-40904/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40904/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:23:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40903: HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0</title><link>https://agentprime.io/advisories/CVE-2025-40903/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40903/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:22:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40902: HTML injection in Users in Guardian/CMC before 26.1.0</title><link>https://agentprime.io/advisories/CVE-2025-40902/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40902/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:21:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40901: HTML injection in Credentials Manager in Guardian/CMC before 26.1.0</title><link>https://agentprime.io/advisories/CVE-2025-40901/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40901/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:19:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40900: Angular template injection in Reports in Guardian/CMC before 26.1.0</title><link>https://agentprime.io/advisories/CVE-2025-40900/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40900/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 May 2026 13:17:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40899: Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0</title><link>https://agentprime.io/advisories/CVE-2025-40899/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40899/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Apr 2026 08:18:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40897: Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0</title><link>https://agentprime.io/advisories/CVE-2025-40897/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40897/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 15 Apr 2026 08:18:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40894: HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0</title><link>https://agentprime.io/advisories/CVE-2025-40894/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40894/</guid><description>CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Mar 2026 13:51:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40898: Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0</title><link>https://agentprime.io/advisories/CVE-2025-40898/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40898/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 13:19:22 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40893: HTML injection in Asset List in Guardian/CMC before 25.5.0</title><link>https://agentprime.io/advisories/CVE-2025-40893/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40893/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 13:17:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40892: Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0</title><link>https://agentprime.io/advisories/CVE-2025-40892/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40892/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 13:16:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40891: HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0</title><link>https://agentprime.io/advisories/CVE-2025-40891/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40891/</guid><description>CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Dec 2025 13:14:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40890: Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0</title><link>https://agentprime.io/advisories/CVE-2025-40890/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40890/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 25 Nov 2025 15:30:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40888: Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0</title><link>https://agentprime.io/advisories/CVE-2025-40888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40888/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:38:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40889: Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0</title><link>https://agentprime.io/advisories/CVE-2025-40889/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40889/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:37:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40887: Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0</title><link>https://agentprime.io/advisories/CVE-2025-40887/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40887/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:37:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40886: Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0</title><link>https://agentprime.io/advisories/CVE-2025-40886/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40886/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:36:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-40885: Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0</title><link>https://agentprime.io/advisories/CVE-2025-40885/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-40885/</guid><description>CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:35:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3719: Incorrect authorization for CLI in Guardian/CMC before 25.2.0</title><link>https://agentprime.io/advisories/CVE-2025-3719/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3719/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:34:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3718: Client-side path traversal in Guardian/CMC before 25.2.0</title><link>https://agentprime.io/advisories/CVE-2025-3718/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3718/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Oct 2025 12:33:18 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13090: Privilege escalation in Guardian/CMC before 24.6.0</title><link>https://agentprime.io/advisories/CVE-2024-13090/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13090/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Jun 2025 10:31:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-13089: Authenticated RCE in update functionality in Guardian/CMC before 24.6.0</title><link>https://agentprime.io/advisories/CVE-2024-13089/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-13089/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 10 Jun 2025 10:29:40 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-4465: Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0</title><link>https://agentprime.io/advisories/CVE-2024-4465/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4465/</guid><description>CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 11 Sep 2024 14:45:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-0218: DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1</title><link>https://agentprime.io/advisories/CVE-2024-0218/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-0218/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Apr 2024 15:55:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-6916: Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1</title><link>https://agentprime.io/advisories/CVE-2023-6916/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-6916/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 Apr 2024 15:50:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-5253: Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0</title><link>https://agentprime.io/advisories/CVE-2023-5253/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-5253/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 15 Jan 2024 10:53:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-32649: DoS on IDS parsing of malformed asset fields in Guardian/CMC &gt;= 22.6.0 before 22.6.3 and 23.1.0</title><link>https://agentprime.io/advisories/CVE-2023-32649/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-32649/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Sep 2023 10:06:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-29245: SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC &gt;= 22.6.0 before 22.6.3 and 23.1.0</title><link>https://agentprime.io/advisories/CVE-2023-29245/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-29245/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Sep 2023 10:04:57 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-2567: Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0</title><link>https://agentprime.io/advisories/CVE-2023-2567/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-2567/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Sep 2023 10:03:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23903: DoS via SAML configuration in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-23903/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23903/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 09:12:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-24015: Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-24015/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24015/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 09:05:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-24471: Information disclosure via the debug function in assertions in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-24471/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24471/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 08:54:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22843: Stored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-22843/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22843/</guid><description>CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 08:46:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23574: Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-23574/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23574/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 08:39:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-22378: Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-22378/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-22378/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 08:01:57 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-24477: Session Fixation in Guardian/CMC before 22.6.2</title><link>https://agentprime.io/advisories/CVE-2023-24477/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24477/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 09 Aug 2023 07:50:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-4259: Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2</title><link>https://agentprime.io/advisories/CVE-2022-4259/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-4259/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 04 May 2023 10:38:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-0551: Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0</title><link>https://agentprime.io/advisories/CVE-2022-0551/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-0551/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 24 Mar 2022 14:15:22 GMT</pubDate><category>CVE</category></item></channel></rss>