CVE-2026-33924High· 7.2▾ TwilightTwo OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted upda…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.6 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Nov 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
1.1%
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to be executed with root privileges, allowing the attacker to read or modify sensitive data, change the appliance configuration, or shut down the appliance.
Guardian < 26.4.0CMC < 26.4.0Upgrade to v26.4.0 or later.
Use internal firewall features to limit access to the web management interface. Review all accounts with administrative privileges and delete unnecessary ones. Install update bundles only when they come from trusted Nozomi Networks sources.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-33923High· 7.2Update bundle signature bypass in Guardian/CMC before 26.4.0
CVE-2026-33387Medium· 4.6A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter
CVE-2026-33388High· 7.4An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges
CVE-2026-33389High· 7.5An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provi…
CVE-2026-33391Medium· 5.4An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges
CVE-2026-33920Low· 3.5A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token