Insufficient sanitization of Dashboards in Guardian/CMC before 26.3.0
A published security advisory; the vulnerabilities below are the ones it describes.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-33387US | — | — | ||
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated user with the required privileg… | ||||
remediations (4)
- MitigationCMC
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones. Additionally, review existing dashboards for malicious content.
- MitigationGuardian
Use internal firewall features to limit access to the web management interface. Review all accounts with access to it and delete unnecessary ones. Additionally, review existing dashboards for malicious content.
- FixedCMC
Upgrade to v26.3.0 or later.
- FixedGuardian
Upgrade to v26.3.0 or later.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan