This vulnerability (CVE-2026-31983) in Nozomi Networks Guardian is due to missing authentication on a critical function: the SSH keys synchronization endpoint. An attacker without any authentication can send requests to this endpoint and obtain sensitive information such as usernames, user groups, and their uploaded public SSH keys. The CVSS 4.0 vector indicates the attack can be performed remotely over the network without user interaction or privileges, with low complexity and no impact on confidentiality, integrity, or availability beyond information disclosure. There is no vendor-provided patch or remediation level at this time.

An unauthenticated attacker can access sensitive information about users and their SSH public keys, which could aid in further reconnaissance or targeted attacks. However, the vulnerability does not directly allow modification or disruption of the system. The exposure of user and key information may increase the risk of subsequent attacks but does not itself compromise system integrity or availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently documented, organizations should monitor Nozomi Networks advisories for updates. Until a fix is available, consider restricting network access to the affected endpoint if possible.