Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%

guardian — Vulnerabilities & Security Advisories 42

All 42 CVE vulnerabilities found in guardian, with AI-generated Chinese analysis, references, and POCs.

This page documents Common Weakness Enumeration (CWE) vulnerabilities affecting the Guardian product from vendor Guardian. It aggregates security findings reported across various operating systems and deployment configurations, covering advisory data from January 2020 through the current month. Users can utilize this resource to track specific vendor advisories, understand the characteristics and impact of a particular weakness class, and look up a product's comprehensive vulnerability history to assess long-term security posture. The aggregation process relies on public advisories, vendor bulletins, and community-reported issues to provide a consolidated view of known security defects. By categorizing issues by severity and impact, this collection helps administrators prioritize remediation efforts based on actual risk rather than theoretical exposure. Each entry includes references to original reports and related CWE identifiers to facilitate deeper technical analysis. The database is regularly updated as new information becomes available from trusted sources. This approach ensures that security teams have access to current and verified data without wading through unstructured information streams. The interface allows filtering by date, severity, and specific product versions to narrow down relevant findings. Ultimately, this resource serves as a centralized reference point for understanding the security landscape surrounding the Guardian product. It supports informed decision-making regarding patch management and infrastructure hardening strategies. All listed vulnerabilities are cross-referenced with established standards to maintain consistency and accuracy across different reporting channels.

Vendor: Nozomi Networks

CVE IDTitleCVSSSeverityPublished
CVE-2025-40904 HTML injection in Smart Polling in Guardian/CMC before 26.1.0 CWE-79 6.5 Medium2026-05-19
CVE-2025-40903 HTML injection in Schedule Restore Archive in Guardian/CMC before 26.1.0 CWE-79 5.9 Medium2026-05-19
CVE-2025-40902 HTML injection in Users in Guardian/CMC before 26.1.0 CWE-79 5.9 Medium2026-05-19
CVE-2025-40901 HTML injection in Credentials Manager in Guardian/CMC before 26.1.0 CWE-79 5.9 Medium2026-05-19
CVE-2025-40900 Angular template injection in Reports in Guardian/CMC before 26.1.0 CWE-1336 4.6 Medium2026-05-19
CVE-2026-45248 Hedera Guardian Authentication Bypass Information Disclosure CWE-306 5.3 Medium2026-05-14
CVE-2025-40899 Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0 CWE-79 8.9 High2026-04-15
CVE-2025-40897 Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0 CWE-863 8.1 High2026-04-15
CVE-2026-39911 Hashgraph Guardian 3.5.1 Unsandboxed JavaScript Execution RCE CWE-668 8.8 High2026-04-09
CVE-2025-40894 HTML injection in Alerted Nodes Dashboard in Guardian/CMC before 25.6.0 CWE-79 4.4 Medium2026-03-04
CVE-2025-40898 Path traversal in Import Arc data archive functionality in Guardian/CMC before 25.5.0 CWE-22 8.1 High2025-12-18
CVE-2025-40893 HTML injection in Asset List in Guardian/CMC before 25.5.0 CWE-79 6.1 Medium2025-12-18
CVE-2025-40892 Stored Cross-Site Scripting (XSS) in Reports in Guardian/CMC before 25.5.0 CWE-79 8.9 High2025-12-18
CVE-2025-40891 HTML injection in in Time Machine functionality in Guardian/CMC before 25.5.0 CWE-79 4.7 Medium2025-12-18
CVE-2025-40890 Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0 CWE-79 7.9 High2025-11-25
CVE-2025-40888 Authenticated SQL Injection on CLI functionality in Guardian/CMC before 25.3.0 CWE-89 5.3 Medium2025-10-07
CVE-2025-40889 Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0 CWE-22 8.1 High2025-10-07
CVE-2025-40887 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 CWE-89 5.3 Medium2025-10-07
CVE-2025-40886 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0 CWE-89 7.5 High2025-10-07
CVE-2025-40885 Authenticated SQL Injection on Smart Polling functionality in Guardian/CMC before 25.2.0 CWE-89 5.3 Medium2025-10-07
CVE-2025-3719 Incorrect authorization for CLI in Guardian/CMC before 25.2.0 CWE-863 8.1 High2025-10-07
CVE-2025-3718 Client-side path traversal in Guardian/CMC before 25.2.0 CWE-22 7.9 High2025-10-07
CVE-2024-13090 Privilege escalation in Guardian/CMC before 24.6.0 CWE-250 7.0 High2025-06-10
CVE-2024-13089 Authenticated RCE in update functionality in Guardian/CMC before 24.6.0 CWE-78 7.2 High2025-06-10
CVE-2024-4465 Incorrect authorization for Reports configuration in Guardian/CMC before 24.2.0 CWE-863 6.0 Medium2024-09-11
CVE-2024-0218 DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1 CWE-1286 7.5 High2024-04-10
CVE-2023-6916 Information disclosure via audit records for OpenAPI requests in Guardian/CMC before 23.4.1 CWE-201 7.2 High2024-04-10
CVE-2023-5253 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0 CWE-306 5.3 Medium2024-01-15
CVE-2023-32649 DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 CWE-1286 7.5 High2023-09-19
CVE-2023-29245 SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 CWE-89 8.1 High2023-09-19

All 42 known CVE vulnerabilities affecting guardian with full Chinese analysis, references, and POCs where available.