Description
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nozomi Networks | Guardian | < 26.0.0 | 26.0.0 |
| Nozomi Networks | CMC | < 26.0.0 | 26.0.0 |
Advisories 2
- SSA-827968 SSA-827968: Vulnerability in Nozomi Guardian/CMC Before V26.2.0 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Aug 11, 2026
- ICSA-26-015-07 Siemens RUGGEDCOM APE1808 Devices CISA ICS & IT advisories · Jul 9, 2026