CVE-2025-40897

CVSS Score & Metrics

Base Score

8.1 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H                                    

Vulnerability Description

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.

Vulnerability Details

Published Date

April 15, 2026

Last Modified

April 17, 2026

CWE ID

CWE-863

Source

NVD

Vendor

Nozomi Networks

Product

Guardian, CMC

External References

https://security.nozominetworks.com/NN-2026:1-01

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment