PT-2026-56729 · Nozomi Networks · Cmc+1

Publicado 2026-07-09 · Atualizado 2026-07-09 · CVE-2026-33390

Mitre

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affecting its availability.

Correção

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-266

Identificadores relacionados

CVE-2026-33390

Produtos afetados

Cmc

Guardian

Referências · 2

• https://security.nozominetworks.com/NN-2026:13-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-33390 · Nota de Segurança