Skip to content
fr Sign in
7.2 High

CVE-2025-40897 An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access…

Description

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.

Affected products and versions

Product Affected versions Fixed in
Guardian 26.0 earliest → < 26.0.0 26.0.0
CMC 26.0 earliest → < 26.0.0 26.0.0
RUGGEDCOM APE1808 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Guardian

The 53 CVEs of Guardian →
CVE-2026-33924 Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient… 7.5 High CVE-2026-33923 A signature verification vulnerability was discovered in the update installation functionality due to inconsistent… 7.5 High CVE-2026-33920 A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to… 5.1 Medium CVE-2026-33391 An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient… 5.3 Medium
Track this CVE