Guardian

This hub aggregates every CVE we track for Guardian, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Guardian.

• CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.08.1Jul 9, 2026
• CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.07.5Jul 9, 2026
• CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.05.3Jul 9, 2026
• CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.07.1Jul 9, 2026
• CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.05.9Jul 9, 2026
• CVE-2026-22674Hashgraph Guardian Stored XSS via branding companyName field4.8Jun 18, 2026
• CVE-2025-40904HTML injection in Smart Polling in Guardian/CMC before 26.1.06.5May 19, 2026
• CVE-2025-40903HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40902HTML injection in Users in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40901HTML injection in Credentials Manager in Guardian/CMC before 26.1.05.9May 19, 2026
• CVE-2025-40900Angular template injection in Reports in Guardian/CMC before 26.1.04.6May 19, 2026
• CVE-2026-45248Hedera Guardian Authentication Bypass Information Disclosure5.3May 14, 2026
• CVE-2025-40899Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.08.9Apr 15, 2026
• CVE-2025-40897Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.08.1Apr 15, 2026
• CVE-2026-39911Hashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE8.8Apr 9, 2026