PT-2026-33014 · Nozomi Networks · Cmc+1

Publicado 2026-04-15 · Atualizado 2026-04-15 · CVE-2025-40897

NVD

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2025-40897

Produtos afetados

Cmc

Guardian

Referências · 2

• https://security.nozominetworks.com/NN-2026:1-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-40897 · Nota de Segurança