# Nozomi Networks vulnerabilities & exploitation > As of 2026-10-10, Threadlinqs tracks 11 Nozomi Networks CVEs, 0 in the CISA Known Exploited Vulnerabilities catalog, linked to 1 tracked threat campaign. **Data as of:** 2026-10-10 ## Exploitation timeline Threadlinqs has recorded 11 Nozomi Networks CVEs published between 2025-06-15 and 2025-11-15. The busiest month was 2025-10 (7 new CVEs). None of them is listed in CISA KEV yet. ## Most exploited vulnerabilities Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 11 of 11 tracked Nozomi Networks CVEs. - [CVE-2024-13089](https://intel.threadlinqs.com/cve/CVE-2024-13089) — HIGH 7.2 · EPSS 1% · 2025-06-10 - [CVE-2025-40889](https://intel.threadlinqs.com/cve/CVE-2025-40889) — HIGH 8.1 · EPSS 0.4% · 2025-10-07 - [CVE-2025-3719](https://intel.threadlinqs.com/cve/CVE-2025-3719) — HIGH 8.1 · EPSS 0.3% · 2025-10-07 - [CVE-2025-40886](https://intel.threadlinqs.com/cve/CVE-2025-40886) — HIGH 7.5 · EPSS 0.3% · 2025-10-07 - [CVE-2025-40885](https://intel.threadlinqs.com/cve/CVE-2025-40885) — MEDIUM 5.3 · EPSS 0.2% · 2025-10-07 - [CVE-2025-40887](https://intel.threadlinqs.com/cve/CVE-2025-40887) — MEDIUM 5.3 · EPSS 0.2% · 2025-10-07 - [CVE-2025-40888](https://intel.threadlinqs.com/cve/CVE-2025-40888) — MEDIUM 5.3 · EPSS 0.2% · 2025-10-07 - [CVE-2025-3718](https://intel.threadlinqs.com/cve/CVE-2025-3718) — HIGH 7.9 · EPSS 0.2% · 2025-10-07 - [CVE-2025-1501](https://intel.threadlinqs.com/cve/CVE-2025-1501) — MEDIUM 4.3 · EPSS 0.2% · 2025-08-26 - [CVE-2025-40890](https://intel.threadlinqs.com/cve/CVE-2025-40890) — HIGH 7.9 · EPSS 0.2% · 2025-11-25 - [CVE-2024-13090](https://intel.threadlinqs.com/cve/CVE-2024-13090) — HIGH 7 · EPSS 0.1% · 2025-06-10 ## Products affected Threadlinqs normalises CPE and CNA product records across all 11 CVEs; 2 distinct Nozomi Networks products are affected. The most frequently affected: - CMC — 11 CVEs - Guardian — 10 CVEs ## Threat activity 1 tracked threat campaign reference Nozomi Networks products or exploit Nozomi Networks CVEs: - [Multiple Vulnerabilities in Nozomi Guardian/CMC Before 25.4.0 on Siemens RUGGEDCOM APE1808 Devices (CVE-2024-13089, CVE-2024-13090, CVE-2025-3719, CVE-2025-40889, et al.)](https://intel.threadlinqs.com/threat/TL-2026-2487) — HIGH — 2026-09-13 ## How to prioritise Nozomi Networks patching This order follows the data Threadlinqs holds for Nozomi Networks, not a generic severity checklist: - No Nozomi Networks CVE is in CISA KEV yet, so rank by exploit probability instead. - Outside KEV, the highest EPSS scores are [CVE-2024-13089](https://intel.threadlinqs.com/cve/CVE-2024-13089) (1%), [CVE-2025-40889](https://intel.threadlinqs.com/cve/CVE-2025-40889) (0.4%), [CVE-2025-3719](https://intel.threadlinqs.com/cve/CVE-2025-3719) (0.3%). - 0 CVEs score Critical and 7 High on CVSS v3 (maximum 8.1, average 6.7); sequence these after KEV and high-EPSS items. - 1 CVE has a public exploit or proof of concept recorded, which shortens the time from disclosure to attack. ## About this data Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-10-10 and refresh daily. Canonical: https://intel.threadlinqs.com/vendors/nozomi-networks All vendors: https://intel.threadlinqs.com/vendors Full detection coverage and IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp