CVE-2026-33391

MediumCVSS 5.4

Published: 08/09/2026(UTC)Updated: 15/10/2026(UTC)Translated: 08/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

28th percentile - higher than 28% of all known CVEs

Summary

An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges. An authenticated user with limited privileges can remotely bypass the intended access control of the web management interface and modify the Smart Polling discovery configuration.

Risk Assessment

An attacker can disrupt the visibility of assets in the monitored network, potentially leading to an incomplete infrastructure view and hindering security incident detection.

Recommendation

Update the software to a version that includes a fix for privilege validation in the Smart Polling functionality.

Other vulnerabilities in Smart Polling

CVE-2026-33389High
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality. Encrypted connections to target devices were established without validating the remote host's identity, and no option was provided to enable it. A man-in-the-middle attacker can impersonate the device during a polling session and intercept communication, including credentials.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS