Cmc

This hub aggregates every CVE we track for Cmc, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Cmc.

• CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.08.1Jul 9, 2026
• CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.07.5Jul 9, 2026
• CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.05.3Jul 9, 2026
• CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.07.1Jul 9, 2026
• CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.05.9Jul 9, 2026
• CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC before 26.1.06.5May 19, 2026
• CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40902HTML injection in Users in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40900Angular template injection in Reports in Guardian/CMC before 26.1.04.6May 19, 2026
• CVE-2025-40899Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.08.9Apr 15, 2026
• CVE-2025-40897Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.08.1Apr 15, 2026
• CVE-2025-40895HTML injection in Sensor Map in CMC before 25.6.04.8Mar 4, 2026
• CVE-2025-40894HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.04.4Mar 4, 2026
• CVE-2025-40898Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.08.1Dec 18, 2025