7.2
High
CVE-2025-40897 An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access…
Description
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Guardian 26.0 | earliest → < 26.0.0 | 26.0.0 |
| CMC 26.0 | earliest → < 26.0.0 | 26.0.0 |
| RUGGEDCOM APE1808 | Versions not published |
Other CVEs of Guardian
The 53 CVEs of Guardian →
CVE-2026-33924
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
7.5
High
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
7.5
High
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to…
5.1
Medium
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient…
5.3
Medium