← CVE Intelligence

CVE-2026-31983

Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 PUBLISHED

Description (CNA)

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH keys.

Affected (CNA)

Vendor / productVersions
Nozomi Networks / Guardianaffected 0 before 26.2.0
Nozomi Networks / CMCaffected 0 before 26.2.0

CWE

CWE-306

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.