Home

Description

An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelligence functionality can perform administrative actions on it, altering the rules configuration, and/or affecting their availability.

PUBLISHED Reserved 2025-04-16 | Published 2026-04-15 | Updated 2026-05-12 | Assigner Nozomi




HIGH: 7.2CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Problem types

CWE-863 Incorrect Authorization

Product status

Default status
unaffected

Any version before 26.0.0
affected

Default status
unaffected

Any version before 26.0.0
affected

Credits

This issue was found by Andrea Palanca of Nozomi Networks Product Security team during an internal investigation. finder

References

cert-portal.siemens.com/productcert/html/ssa-827968.html

security.nozominetworks.com/NN-2026:1-01

cve.org (CVE-2025-40897)

nvd.nist.gov (CVE-2025-40897)

Download JSON