CVE Intelligence

Northern.tech vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Northern.tech products: 3 record(s), with severity, exploitation and fixes.

Cfengine 3

Exploited only (KEV) →

CVE-2026-24712 High · 7.3 CWE-77 May 14, 2026
Command Injection in Northern.tech Cfengine
Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.
CVE-2026-24711 Medium · 5.3 CWE-284 May 14, 2026
Improper Access Control in Northern.tech Cfengine
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control.
CVE-2026-24710 Medium · 6.1 CWE-79 May 14, 2026
Cross-site Scripting (XSS) in Northern.tech Cfengine
Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS.