Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
view advisory published 2026-09-08
A published security advisory; the vulnerabilities below are the ones it describes.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33389US | — | — | ||
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without valid… | ||||
02
remediations (6)
- MitigationArc
N/A
- MitigationCMC
N/A
- MitigationGuardian
N/A
- FixedArc
Upgrade Guardian/CMC to v26.3.0 or later. Upgrade Arc to v2.7.0 or later.
- FixedCMC
Upgrade Guardian/CMC to v26.3.0 or later. Upgrade Arc to v2.7.0 or later.
- FixedGuardian
Upgrade Guardian/CMC to v26.3.0 or later. Upgrade Arc to v2.7.0 or later.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan