CVE-2023-5936: Nozomi Networks Arc

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.

Affected products

• Nozomi Networks Arc: before 1.6.0 (fixed in 1.6.0)
• Nozominetworks Arc: before 1.6.0 (fixed in 1.6.0)

Published 2024-05-15. Last modified 2026-06-17.