Arc
Security Risk Profile
55
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 16, 2005 to present
10
Total CVEs
5
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
55/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
1High
4Medium
2Low
3Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
1
Most Affected Products
1. arc arc9
2. arc Arc sensors1
3. Nozominetworks Cmc1
4. Nozominetworks Guardian1
5. Nozominetworks Arc1
Recent Vulnerabilities
See more →CVE-2026-33390
CVSS 7.2high
Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0
7/9/2026🔧 No Patch
CVE-2025-40896
CVSS 6.5medium
Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0
3/4/2026
CVE-2024-52928
CVSS 9.6critical
6/26/2025🔧 No Patch
CVE-2023-5938
CVSS 8.9high
Path traversal via 'zip slip' in Arc before v1.6.0
5/15/2024
CVE-2023-5937
CVSS 5.2medium
Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0
5/15/2024
CVE-2023-5936
CVSS 7.3high
Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
5/15/2024
CVE-2023-5935
CVSS 7.3high
Missing authentication for local web interface in Arc before v1.6.0
5/15/2024
REDHAT-BUG-1179142
CVSS 1.0low
1/6/2015🔧 No Patch
CVE-2005-2992
CVSS 2.1low
10/13/2005
CVE-2005-2945
CVSS 2.1low
9/16/2005🔧 No Patch
Monitor Arc in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.