← CVE Radar
CVE-2026-31984DoS through oversized audit log entries in Guardian/CMC before 26.2.0
A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessively large input that is recorded into audit entries, possibly exhausting the available disk space and rendering the system inoperable.
8.7 HIGHEPSS 0.50%Not in KEVNVD: Modified
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.7 | HIGH | 4.0Nozomi (CNA) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| 7.5 | HIGH | 3.1Nozomi (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Details
- CVE ID
- CVE-2026-31984
- Status
- Modified
- Assigner (CNA)
- Nozomi
- Published
- Jul 9, 2026
- Last modified
- 2026-08-11 13:18 UTC
- Weaknesses
- CWE-770 · Allocation of resources without limits or throttling
Affected Products
As published by the CNA in the CVE record.
Nozomi NetworksGuardian1 version range
- before 26.2.0
Nozomi NetworksCMC1 version range
- before 26.2.0