Live › vulnerability › CVE-2026-33924
Two OS command injection flaws in the update installer of Nozomi Networks Guardian and CMC before 26.4.0. An admin can upload a crafted update bundle that runs commands as root. Fixed in 26.4.0.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 11:24 UTC. All times on this page are UTC.
Anyone running Nozomi Networks Guardian sensors or Central Management Console (CMC) older than 26.4.0, including the Siemens RUGGEDCOM APE1808, which embeds Nozomi software (Siemens status not checked here). The attacker needs an administrator account on the web management interface, then uploads a crafted update bundle that runs commands as root. Deployments where the management interface is firewalled and admin accounts are few and trusted are at lower risk.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Nozomi Networks Guardian | vendor | < 26.4.0 | 26.4.0 |
| Nozomi Networks CMC | vendor | < 26.4.0 | 26.4.0 |
26.4.0 is affectedUpgrade Nozomi Networks Guardian and CMC to v26.4.0 or later.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to be executed with root privileges, allowing the attacker to read or modify sensitive data, change the appliance configuration, or shut down the appliance.
This page as .md · .json · in your agent: get_signal("CVE-2026-33924")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.