What’s Vulnerable › Vulnerabilities

CVE-2026-31984: DoS through oversized audit log entries in Guardian/CMC before 26.2.0

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-07-09 · updated 2026-08-11
• Weakness: CWE-770

Description

A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessively large input that is recorded into audit entries, possibly exhausting the available disk space and rendering the system inoperable.

Affected products

• Nozomi Networks CMC: before 26.2.0 — fixed in 26.2.0
• Nozomi Networks Guardian: before 26.2.0 — fixed in 26.2.0

How to fix

Upgrade to a fixed version: Nozomi Networks CMC 26.2.0; Nozomi Networks Guardian 26.2.0. Check the vendor advisory for mitigations.

References

• https://security.nozominetworks.com/NN-2026:11-01
• https://cert-portal.siemens.com/productcert/html/ssa-827968.html

Get alerted when CVE-2026-31984 or the next vulnerability affects your stack