CVE-2025-40896: medium-severity vulnerability in Nozomi Networks Arc
Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.1%
The server certificate was not verified when an Arc agent connected to a Guardian or CMC.
A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Arc agent and the Guardian or CMC. This could result in theft of the client token and sensitive information (such as assets and alerts), impersonation of the server, or injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
Nozomi Networks · ArcRelated CVEs — Nozomi Networks Arc
In the same product, most dangerous first.
CVE-2023-5938HIGHPath traversal via 'zip slip' in Arc before v1.6.0EPSS 0.7%CVE-2026-33389MEDIUMDisabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0EPSS 0.2%CVE-2026-33922MEDIUMPath traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0EPSS 0.2%CVE-2023-5935HIGHMissing authentication for local web interface in Arc before v1.6.0EPSS 0.2%CVE-2023-5936HIGHUnsafe temporary data privileges on Unix systems in Arc before v1.6.0EPSS 0.1%CVE-2023-5937MEDIUMSensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0EPSS 0.1%