CVE-2025-40889 | Nozomi Guardian/CMC up to 25.1.x Time Machine /data path traversal

October 7, 2025 Yanac

A vulnerability labeled as critical has been found in Nozomi Guardian and CMC up to 25.1.x. This issue affects some unknown processing of the file /data of the component Time Machine. Such manipulation leads to path traversal.

This vulnerability is documented as CVE-2025-40889. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More