Nozomi Networks
Nozomi Networks Security Releases - September 2026
nozomi-networks-2026-09 Sep 1, 2026 Source: Vendor
Nozomi Networks security advisories for September 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-33387
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
5 lines
Showing 1–5 of 5
CVE-2026-33387
BR2026-0000-032162
Guardian, CMC
unclaimed
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileges can define a d...
Credited as Andrea Palanca of Nozomi Networks Product Security team during an internal investigation
CVE-2026-33388
BR2026-0000-032163
Guardian, CMC
unclaimed
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can vi...
Credited as Elia Battiston of Nozomi Networks during an internal investigation
CVE-2026-33389
BR2026-0000-032164
Guardian, CMC, Arc
unclaimed
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote ...
Credited as Stefano Balzarotti of Nozomi Networks and Andrea Palanca of Nozomi Networks Product Security team during an internal investigation
CVE-2026-33391
BR2026-0000-032165
Guardian, CMC
unclaimed
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can ...
Credited as one of our customers during a VAPT testing session
CVE-2026-33920
BR2026-0000-032166
Guardian, CMC
unclaimed
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token. An attacker with a valid account can ...
Credited as one of our customers during a VAPT testing session