CVE-2026-31985— Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
Quick assessment
Affected
Nozomi Networks Remote Collector
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Nozomi Networks Remote Collector是美国Nozomi Networks公司的一款数据收集服务器。 Nozomi Networks Remote Collector 26.2.0之前版本存在配置错误漏洞，该漏洞源于通过n2os-tui配置上游Guardian或CMC时生成的配置禁用了TLS证书验证，且未提供启用选项，可能导致攻击者执行中间人攻击并拦截Remote Collector与Guardian或CMC之间的通信，从而造成同步令牌被窃取、服务器被冒充、将虚假数据（如错误资产
Possible ATT&CK Techniques 2 AI
T1041 · Exfiltration Over C2 Channel T1557 · Adversary-in-the-MiddleAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Nozomi Networks | Remote Collector | < 26.2.0 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-31985
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Disabled and non-configurable TLS certificate validation in n2os-tui when connecting the Remote Collector to a Guardian or CMC, in Remote Collector before v26.2.0
Source: CVE Program / CVE List V5
Vulnerability Description
When the upstream Guardian or CMC was configured in the Remote Collector via n2os-tui, the generated configuration disabled TLS certificate verification, and no option was provided to enable it. A malicious actor could perform a man-in-the-middle attack and intercept the communication between the Remote Collector and the Guardian or CMC. This could result in theft of the sync token, impersonation of the server, injection of spoofed data (such as false asset information or vulnerabilities) into the Guardian or CMC, or disruption of the data flow between the Remote Collector and the Guardian or CMC.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
缺乏对安全的管理控制
Source: CVE Program / CVE List V5
Vulnerability Title
Nozomi Networks Remote Collector 配置错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nozomi Networks Remote Collector是美国Nozomi Networks公司的一款数据收集服务器。 Nozomi Networks Remote Collector 26.2.0之前版本存在配置错误漏洞，该漏洞源于通过n2os-tui配置上游Guardian或CMC时生成的配置禁用了TLS证书验证，且未提供启用选项，可能导致攻击者执行中间人攻击并拦截Remote Collector与Guardian或CMC之间的通信，从而造成同步令牌被窃取、服务器被冒充、将虚假数据（如错误资产
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Nozomi Networks | Remote Collector | 0 ~ 26.2.0 | - |
|
II. Public POCs for CVE-2026-31985
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-31985
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-31985 (1)
Same Patch Batch · Nozomi Networks · 2026-07-09 · 6 CVEs total
| CVE-2026-33390 | 8.1 HIGH | Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0 |
| CVE-2026-31984 | 7.5 HIGH | DoS through oversized audit log entries in Guardian/CMC before 26.2.0 |
| CVE-2026-31982 | 7.1 HIGH | Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0 |
| CVE-2026-31981 | 5.9 MEDIUM | HTML injection in Diagram tab and Graph view in Guardian/CMC before 26.2.0 |
| CVE-2026-31983 | 5.3 MEDIUM | Missing authentication in SSH keys synchronization endpoint in Guardian/CMC before 26.2.0 |
IV. Related Vulnerabilities
Same vendor: Nozomi Networks
-
CVE-2026-33920
Cross-site request forgery in the Guardian/CMC login before -
CVE-2026-33391
Incorrect authorization in Smart Polling configuration in Gu -
CVE-2026-33389
Disabled and non-configurable certificate/host key validatio -
CVE-2026-33388
Incorrect authorization in Credentials Manager in Guardian/C -
CVE-2026-33387
Insufficient sanitization of Dashboards in Guardian/CMC befo
Same weakness: CWE-671
-
CVE-2026-33389
Disabled and non-configurable certificate/host key validatio -
CVE-2025-24024
Mjolnir v1.9.0 accepts commands from any room -
CVE-2023-20115
Cisco Nexus Series Switches 安全漏洞 -
CVE-2022-29163
Bypass of password requirements when sharing a folder via th -
CVE-2018-13283
Synology SSL VPN Client 权限许可和访问控制问题漏洞
V. Comments for CVE-2026-31985
No comments yet