Nozomi Networks Arc

• CVE-2026-33389 High 7.5 Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0 0.2%
• CVE-2026-33922 Medium 6.0 Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0 0.2%
• CVE-2026-33921 Medium 5.2 Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0 0.1%
• CVE-2025-40896 Medium 6.5 Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0 0.1%
• CVE-2023-5938 High 8.0 Path traversal via 'zip slip' in Arc before v1.6.0 0.7%
• CVE-2023-5937 Low 3.8 Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0 0.1%
• CVE-2023-5936 High 7.8 Unsafe temporary data privileges on Unix systems in Arc before v1.6.0 0.1%
• CVE-2023-5935 High 7.4 Missing authentication for local web interface in Arc before v1.6.0 0.2%