CVE-2025-40891 | Nozomi Guardian/CMC up to 25.4.x Time Machine Snapshot Diff Feature cross site scripting

December 18, 2025 Yanac

A vulnerability, which was classified as problematic, was found in Nozomi Guardian and CMC up to 25.4.x. This issue affects some unknown processing of the component Time Machine Snapshot Diff Feature. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-40891. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.VulDB Recent EntriesRead More