Nozomi Networks Arc
8 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-33389 | < 2.7.0 | Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 | MEDIUM 5.3 | 0.2 % | ||
| CVE-2026-33922 | < 2.7.0 | Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0 | MEDIUM 6.8 | 0.2 % | ||
| CVE-2026-33921 | < 2.7.0 | Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0 | MEDIUM 4.8 | 0.1 % | ||
| CVE-2025-40896 | < 2.2.0 | Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0 | MEDIUM 6.3 | 0.1 % | ||
| CVE-2023-5938 | < 1.6.0 | Path traversal via 'zip slip' in Arc before v1.6.0 | HIGH 8.9 | 0.7 % | ||
| CVE-2023-5937 | < 1.6.0 | Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0 | MEDIUM 5.2 | 0.1 % | ||
| CVE-2023-5936 | < 1.6.0 | Unsafe temporary data privileges on Unix systems in Arc before v1.6.0 | HIGH 7.3 | 0.1 % | ||
| CVE-2023-5935 | < 1.6.0 | Missing authentication for local web interface in Arc before v1.6.0 | HIGH 7.3 | 0.2 % |