Back to overview

CVE-2026-31984

HIGH
7.5
CVSS 3.1
Description
A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessively large input that is recorded into audit entries, possibly exhausting the available disk space and rendering the system inoperable.

Metadata

CVE ID
CVE-2026-31984
State
PUBLISHED
Assigner
Nozomi
Reserved
2026-03-10 16:14 UTC
Published
2026-07-09 07:22 UTC
Last updated
2026-07-09 12:40 UTC
Primary CWE
CWE-770
CWE-770 Allocation of resources without limits or throttling
Vendor / Product
Nozomi Networks / Guardian
Sources
cve.org  ·  NVD

Severity & Metrics

7.5 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SSVC — CISA Coordinator
Exploitation
none
Automatable
yes
Tech. Impact
partial
Affected products (2)
VendorProductPlatformVersions
Nozomi Networks CMC — 0 < 26.2.0
Nozomi Networks Guardian — 0 < 26.2.0
Weakness (CWE)
CWESourceDescription
CWE-770 cna CWE-770 Allocation of resources without limits or throttling
CVSS scores (2)
ScoreSeverityVersionSourceVector
8.7 HIGH 4.0 cna CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
7.5 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References (1)
Back to overview