Northern.tech Cfengine vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Northern.tech Cfengine: 3 record(s), with affected versions and fixes.cpe:2.3:a:northern.tech:cfengine
CVE-2026-24712
High · 7.3
CWE-77 May 14, 2026
Command Injection in Northern.tech Cfengine
Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.
CVE-2026-24711
Medium · 5.3
CWE-284 May 14, 2026
Improper Access Control in Northern.tech Cfengine
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control.
CVE-2026-24710
Medium · 6.1
CWE-79 May 14, 2026
Cross-site Scripting (XSS) in Northern.tech Cfengine
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS.