Guardian
This hub aggregates every CVE we track for Guardian, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
61
CVEs tracked
0
Critical
35
High
0
In CISA KEV
Severity distribution
HIGH35MEDIUM24LOW2
Monthly trend
0
0
0
0
0
0
0
0
2
0
0
0
7
1
4
0
0
1
3
6
1
5
4
5
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Guardian.
- CVE-2026-33920Cross-site request forgery in the Guardian/CMC login before 26.3.03.5
- CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.05.4
- CVE-2026-33389Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.07.5
- CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.07.4
- CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.04.6
- CVE-2026-55734guardian atom exhaustion in Guardian.Permissions.encode_permissions!/17.5
- CVE-2026-55733Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation7.5
- CVE-2026-54894Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys7.5
- CVE-2026-55735Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation7.5
- CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.08.1
- CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.07.5
- CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.05.3
- CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.07.1
- CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.05.9
- CVE-2026-22674Hashgraph Guardian Stored XSS via branding companyName field4.8
Product normalization is registry-driven with AI assist and human review. How it works