Cmc

This hub aggregates every CVE we track for Cmc, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Cmc.

• CVE-2026-33920Cross-site request forgery in the Guardian/CMC login before 26.3.03.5Sep 8, 2026
• CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.05.4Sep 8, 2026
• CVE-2026-33389Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.07.5Sep 8, 2026
• CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.07.4Sep 8, 2026
• CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.04.6Sep 8, 2026
• CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.08.1Jul 9, 2026
• CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.07.5Jul 9, 2026
• CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.05.3Jul 9, 2026
• CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.07.1Jul 9, 2026
• CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.05.9Jul 9, 2026
• CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC before 26.1.06.5May 19, 2026
• CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40902HTML injection in Users in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40900Angular template injection in Reports in Guardian/CMC before 26.1.04.6May 19, 2026