medium5.3
CVE-2026-31983
A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint.
Impact
A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint. An unauthenticated attacker can send a request to the SSH keys synchronization endpoint and obtain the list of users that have uploaded their public SSH keys, their groups, and the uploaded public SSH keys.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nozominetworks | Cmc | before 26.2.0 |
| Nozominetworks | Guardian | before 26.2.0 |