Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-33921— Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0

Quick assessment

Affected
Nozomi Networks Arc
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Nozomi Networks ARC是美国Nozomi Networks公司的一个创建和维护文件存档的软件包。 Nozomi Networks ARC 2.7.0之前版本存在配置错误漏洞，该漏洞源于Windows安装程序部署Npcap时访问限制选项保留不安全默认值，可能导致无管理员权限的本地用户利用Npcap驱动捕获到达主机的流量，泄露主机及同一网段其他系统的信息，并可发送任意原始数据包。

CVSS 5.2 · Medium EPSS 0.13% · P2

Affected Version Matrix 1

VendorProduct Version RangeStatus
Nozomi Networks Arc < 2.7.0 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-33921

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0
Source: CVE Program / CVE List V5
Vulnerability Description
The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only. A local user without administrative privileges could use the Npcap driver to capture the traffic reaching the host, which discloses information belonging both to the host and to other systems on the same network segment, and to send arbitrary raw packets on that segment.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
不安全的默认资源初始化
Source: CVE Program / CVE List V5
Vulnerability Title
Nozomi Networks ARC 配置错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nozomi Networks ARC是美国Nozomi Networks公司的一个创建和维护文件存档的软件包。 Nozomi Networks ARC 2.7.0之前版本存在配置错误漏洞，该漏洞源于Windows安装程序部署Npcap时访问限制选项保留不安全默认值，可能导致无管理员权限的本地用户利用Npcap驱动捕获到达主机的流量，泄露主机及同一网段其他系统的信息，并可发送任意原始数据包。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Nozomi Networks Arc 0 ~ 2.7.0 -

II. Public POCs for CVE-2026-33921

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-33921

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-33921 (1)

IV. Related Vulnerabilities

Same product: Arc
Same vendor: Nozomi Networks
Same weakness: CWE-1188

V. Comments for CVE-2026-33921

No comments yet

Leave a comment