CVE Program partner

Nozomi

Nozomi Networks Inc.

API
CVEs, 365 days85303 all time, 0 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationNozomi Networks Inc.
RoleCNA
TypeVendor, Researcher
Reports tomitre
ScopeAll Nozomi Networks products, as well as vulnerabilities in third-party software discovered by Nozomi Networks that are not in another CNA’s scope.
Advisorieshttps://security.nozominetworks.com/

Latest CVEs · RSS

  • CVE-2026-73177 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of the Advantech EKI-1
  • CVE-2026-73176 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web ma
  • CVE-2026-73175 2026-09-16 · CVSS 7.1
    Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vulnerability in the OPC UA gateway component of Advantech EKI-1242EIMS in firmware
  • CVE-2026-73174 2026-09-16 · CVSS 8.7
    Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive Information vulnerability in the edgserver management protocol of Advantech EKI-1
  • CVE-2026-73173 2026-09-16 · CVSS 8.8
    Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical Function vulnerability in the edgserver management protocol of Advantech EKI-1242
  • CVE-2026-73172 2026-09-16 · CVSS 9.3
    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the edgser
  • CVE-2026-73171 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmwa
  • CVE-2026-73170 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the Modbus CSV import workflow of Advantech
  • CVE-2026-73169 2026-09-16 · CVSS 6.3
    Nozomi Networks Labs identified a CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Modbus trans
  • CVE-2026-73167 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web ma
  • CVE-2026-73166 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability in the web management interface of Advantech E
  • CVE-2026-73165 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web ma
  • CVE-2026-73164 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web ma
  • CVE-2026-73163 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the web ma
  • CVE-2026-19535 2026-09-16 · CVSS 8.6
    Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the LuCI administrative web interface of Advantech EKI-1242IEIMS i
  • CVE-2026-33920 2026-09-08 · CVSS 5.1
    A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to missing validation of the anti-CSRF token.
  • CVE-2026-33391 2026-09-08 · CVSS 5.3
    An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authentica
  • CVE-2026-33389 2026-09-08 · CVSS 5.3
    An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target d
  • CVE-2026-33388 2026-09-08 · CVSS 6.4
    An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticate
  • CVE-2026-33387 2026-09-08 · CVSS 5.1
    A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with t
  • CVE-2026-57472 2026-08-14 · CVSS 6.9
    Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management fu
  • CVE-2026-57471 2026-08-14 · CVSS 6.8
    Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management fu
  • CVE-2026-57469 2026-08-14 · CVSS 5.1
    Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2
  • CVE-2026-13198 2026-08-14 · CVSS 5.9
    Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the even
  • CVE-2026-13197 2026-08-14 · CVSS 7.3
    Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the conf

All CVE Program partners