What’s Vulnerable › Products

Nozomi Networks Arc vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Nozomi Networks Arc version is affected

Latest Nozomi Networks Arc vulnerabilities

• CVE-2026-33389 — Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 (CVSS 7.5)
• CVE-2026-33922 — Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0 (CVSS 6.0)
• CVE-2026-33921 — Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0 (CVSS 5.2)
• CVE-2025-40896 — Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0 (CVSS 4.8)
• CVE-2023-5938 — Path traversal via 'zip slip' in Arc before v1.6.0 (CVSS 8.0)
• CVE-2023-5937 — Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0 (CVSS 3.8)
• CVE-2023-5936 — Unsafe temporary data privileges on Unix systems in Arc before v1.6.0 (CVSS 7.8)
• CVE-2023-5935 — Missing authentication for local web interface in Arc before v1.6.0 (CVSS 7.4)