Access Control Vulnerability in Smart Polling Configuration by Nozomi Networks
CVE-2026-33391
5.3MEDIUM
What is CVE-2026-33391?
An access control vulnerability has been identified in the Smart Polling configuration functionality of Nozomi Networks. This security flaw arises from inadequate validation of user privileges. Authenticated users with restricted rights can exploit this vulnerability to bypass established access controls within the web management interface. As a result, they may alter the Smart Polling discovery settings, which could potentially disrupt the visibility of network assets, posing a significant risk to network integrity and security.
Affected Version(s)
CMC 0 < 26.3.0
Guardian 0 < 26.3.0
References
CVSS V4
Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
This issue was found by one of our customers during a VAPT testing session.