| CVE-2026-33924 |
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-33923 |
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
|
7.5
High
|
Oct 29, 2026 |
| CVE-2026-33920 |
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to…
|
5.1
Medium
|
Sep 8, 2026 |
| CVE-2026-33391 |
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient…
|
5.3
Medium
|
Sep 8, 2026 |
| CVE-2026-33389 |
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which…
|
5.3
Medium
|
Sep 8, 2026 |
| CVE-2026-33388 |
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation…
|
6.4
Medium
|
Sep 8, 2026 |
| CVE-2026-33387 |
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input…
|
5.1
Medium
|
Sep 8, 2026 |
| CVE-2026-33390 |
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors…
|
7.2
High
|
Jul 9, 2026 |
| CVE-2026-31984 |
A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging…
|
8.7
High
|
Jul 9, 2026 |
| CVE-2026-31983 |
A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint
|
6.9
Medium
|
Jul 9, 2026 |
| CVE-2026-31982 |
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of…
|
5.3
Medium
|
Jul 9, 2026 |
| CVE-2026-31981 |
A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input…
|
4.8
Medium
|
Jul 9, 2026 |
| CVE-2025-40904 |
A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an…
|
5.1
Medium
|
May 19, 2026 |
| CVE-2025-40903 |
A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper…
|
4.8
Medium
|
May 19, 2026 |
| CVE-2025-40902 |
A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input…
|
4.8
Medium
|
May 19, 2026 |
| CVE-2025-40901 |
A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation…
|
4.8
Medium
|
May 19, 2026 |
| CVE-2025-40900 |
An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an…
|
5.1
Medium
|
May 19, 2026 |
| CVE-2025-40899 |
A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper…
|
7.1
High
|
Apr 15, 2026 |
| CVE-2025-40897 |
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access…
|
7.2
High
|
Apr 15, 2026 |
| CVE-2025-40895 |
A Stored HTML Injection vulnerability was discovered in the CMC's Sensor Map functionality due to improper validation on…
|
2.0
Low
|
Mar 4, 2026 |
| CVE-2025-40894 |
A Stored HTML Injection vulnerability was discovered in the Alerted Nodes Dashboard functionality due to improper…
|
2.1
Low
|
Mar 4, 2026 |
| CVE-2025-40898 |
A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient…
|
7.2
High
|
Dec 18, 2025 |
| CVE-2025-40893 |
A Stored HTML Injection vulnerability was discovered in the Asset List functionality due to improper validation of…
|
5.3
Medium
|
Dec 18, 2025 |
| CVE-2025-40892 |
A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an…
|
7.1
High
|
Dec 18, 2025 |
| CVE-2025-40891 |
A Stored HTML Injection vulnerability was discovered in the Time Machine Snapshot Diff functionality due to improper…
|
2.3
Low
|
Dec 18, 2025 |