CVE-2026-31983: Nozominetworks Cmc

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH keys.

Affected products

• Nozominetworks Cmc: before 26.2.0 (fixed in 26.2.0)
• Nozominetworks Guardian: before 26.2.0 (fixed in 26.2.0)

Published 2026-07-09. Last modified 2026-08-11.