Cross-Site Request Forgery Vulnerability in Login Functionality of Nozomi Networks

CVE-2026-33920

What is CVE-2026-33920?

A cross-site request forgery issue has been identified within the login functionality of Nozomi Networks products. This vulnerability arises from the lack of validation for the anti-CSRF token during authentication processes, both for standard and SAML logins. As a result, an attacker possessing valid account credentials can deceive users into authenticating inadvertently with the attacker’s account. Any actions performed by the user would be executed under the attacker’s authorization, severely undermining the integrity of the audit trail and potentially leading to unauthorized access and manipulation of sensitive information.

References