View-only rule modification via unenforced authorization

Incorrect authorization in Nozomi Networks Guardian and CMC before 26.0.0 allows remote authenticated users to alter Threat Intelligence rules. The Threat Intelligence authorization path fails to enforce a restriction that should confine view-only accounts to read access, leaving administrative rule operations available. A view-only Threat Intelligence account is required; successful use can change the rules configuration or make those rules unavailable, without a reported confidentiality impact.