Guardian
61 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Guardian, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Guardian CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 2 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 7 |
| 2025-11 | 1 |
| 2025-12 | 4 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 1 |
| 2026-04 | 3 |
| 2026-05 | 6 |
| 2026-06 | 1 |
| 2026-07 | 5 |
| 2026-08 | 4 |
| 2026-09 | 5 |
Severity
How the 61 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- High35
- Medium24
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Guardian.
- CVE-2026-33920Cross-site request forgery in the Guardian/CMC login before 26.3.03.5
- CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC before 26.3.05.4
- CVE-2026-33389Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.07.5
- CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.07.4
- CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.04.6
- CVE-2026-55734guardian atom exhaustion in Guardian.Permissions.encode_permissions!/17.5
- CVE-2026-55733Atom-table exhaustion denial of service in Guardian permissions AtomEncoding via unbounded atom creation7.5
- CVE-2026-54894Atom-table exhaustion denial of service in Guardian via unbounded atom creation from binary keys7.5
- CVE-2026-55735Guardian.revoke/3 acts on unverified token claims, allowing forged-token session revocation7.5
- CVE-2026-33390Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.08.1
- CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.07.5
- CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.05.3
- CVE-2026-31982Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.07.1
- CVE-2026-31981HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.05.9
- CVE-2026-22674Hashgraph Guardian Stored XSS via branding companyName field4.8
Product grouping is registry-driven, with AI assist and human review. How it works