---
id: CVE-2025-40900
title: >-
  An Angular template injection vulnerability was discovered in the Reports
  functionality due to improper validation of an input parameter
summary: >-
  An Angular template injection vulnerability was discovered in the Reports
  functionality due to improper validation of an input parameter. An
  authenticated user with report privileges can define a malicious report
  containing an Angular te…
severity: medium
cvss: 4.6
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L'
cwe:
  - CWE-1336
vendor: nozominetworks
product: cmc
affected:
  - cmc < 26.1.0
  - guardian < 26.1.0
patched:
  - cmc 26.1.0
  - guardian 26.1.0
published: '2026-05-19'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-40900'
references:
  - url: 'https://security.nozominetworks.com/NN-2026:3-01'
    label: prodsec@nozominetworks.com
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-827968.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
epss: 0.00201
epssPercentile: 0.09283
ingestedAt: '2026-10-14T13:30:58.501Z'
---

## Overview

An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to import a malicious report template. When the victim views or imports the report, the Angular template executes in their browser context, allowing the attacker to modify application data, or disrupt application availability. Full XSS exploitation and direct information disclosure are prevented by the existing input validation and Content Security Policy configuration.

## Affected

- `cmc < 26.1.0`
- `guardian < 26.1.0`

## Remediation

Upgrade past the affected range:

- `cmc 26.1.0`
- `guardian 26.1.0`