← CVE Radar
CVE-2026-31983Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0
A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH keys.
6.9 MEDIUMEPSS 0.44%Not in KEVNVD: Modified
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 6.9 | MEDIUM | 4.0Nozomi (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
| 5.3 | MEDIUM | 3.1Nozomi (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
Details
- CVE ID
- CVE-2026-31983
- Status
- Modified
- Assigner (CNA)
- Nozomi
- Published
- Jul 9, 2026
- Last modified
- 2026-08-11 13:18 UTC
- Weaknesses
- CWE-306 · Missing authentication for critical function
Affected Products
As published by the CNA in the CVE record.
Nozomi NetworksGuardian1 version range
- before 26.2.0
Nozomi NetworksCMC1 version range
- before 26.2.0