CVE-2025-40901 Details

A stored HTML injection vulnerability has been identified in the Credentials Manager feature of Nozomi Networks Guardian and CMC versions prior to 26.1.0. This vulnerability arises from inadequate validation of input parameters, allowing an authenticated user with administrative rights to create a malicious identity embedded with HTML tags. When another user attempts to delete this identity, the injected HTML is executed in their browser, potentially leading to phishing attacks and open redirects. Although full cross-site scripting exploitation and direct information disclosure are blocked by current input validation and Content Security Policy settings, the vulnerability still poses significant risks.

Users are advised to upgrade to version 26.1.0 or later. Nozomi customers should also review and manage administrative access and stored identities in the Credentials Manager.