Nozomi Networks Product Security vulnerabilities and threats

An authenticated remote code execution (RCE) vulnerability exists in the update functionality of Nozomi Networks Guardian/CMC products prior to version 26.4.0. This flaw allows an authenticated attacker to execute arbitrary code on the affected system.

An update bundle signature bypass vulnerability exists in Nozomi Networks Guardian/CMC products before version 26.4.0. This flaw allows an attacker to bypass signature verification of update bundles, potentially enabling unauthorized or malicious updates.