AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Nozomi NetworksCVE-2026-31984

Nozomi Networks CMC: denial of service

Nozomi Networks

CVE-2026-31984 · Published Jul 9, 2026 · updated Aug 11, 2026

High8.7
Fix: upgrade to Guardian 26.2.0 or later (2 fixed versions below)
Nozomi Networks advisory

A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessively large input that is recorded into audit entries, possibly exhausting the available disk space and rendering the system inoperable.

Affected versions

PackageAffectedFixed in
CMC
Product
< 26.2.026.2.0
Guardian
Product
< 26.2.026.2.0
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-770

More Nozomi Networks advisories

All Nozomi Networks
Medium 4.8Aug 11Nozomi Networks Arc: insecure defaultCVE-2026-33921fixed in 2.7.0High 8.3Jul 9When the upstream Guardian or CMC was configured in the Remote Collector via...CVE-2026-31985fixed in 26.2.0High 7.2Jul 9An Incorrect Privilege Assignment vulnerability was discovered in the...CVE-2026-33390fixed in Guardian 26.2.0 +1Medium 4.8Jul 9Nozomi Networks Diagram tab: open redirectCVE-2026-31981fixed in Guardian 26.2.0 +1Medium 5.3Jul 9Nozomi Networks SAML Single Sign-On functionality: open redirectCVE-2026-31982fixed in Guardian 26.2.0 +1Medium 6.9Jul 9Nozomi Networks SSH keys synchronization endpoint: missing authenticationCVE-2026-31983fixed in Guardian 26.2.0 +1