CVE-2026-33920: CWE-352 Cross-site request forgery (CSRF) in Nozomi Networks Guardian

This vulnerability involves a CSRF flaw in Nozomi Networks Guardian's login process where the anti-CSRF token is not validated. This allows an attacker who already has a valid account to cause a victim to unknowingly authenticate as the attacker. Consequently, any actions performed by the victim during this session are logged under the attacker's account, undermining the integrity of audit logs and potentially enabling unauthorized activity attribution.

The vulnerability compromises the integrity of the audit trail by attributing victim actions to the attacker’s account. This can lead to confusion in accountability and may facilitate unauthorized operations under the guise of the attacker’s credentials. However, it requires the attacker to have a valid account and user interaction (UI:P).

No official patch or fix information is provided. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should be cautious of social engineering attempts that could exploit this CSRF vulnerability.