{"id":"CVE-2026-11804","aliases":["EUVD-2026-48289","GHSA-769r-j4hr-6567"],"status":"published","title":"Program Module Vulnerability","description":"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.","severity":{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00236,"percentile":0.1472,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-280"],"published":"2026-07-23T15:07:42Z","modified":"2026-07-23T19:16:51Z","products":[{"vendor":"tridium","product":"niagara enterprise security"},{"vendor":"tridium","product":"niagara framework"}],"references":[{"url":"https://www.honeywell.com/us/en/product-security"},{"url":"https://www.tridium.com/us/en/product-security"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-11804"},{"url":"https://github.com/advisories/GHSA-769r-j4hr-6567"}],"sources":{"cve":[{"id":"CVE-2026-11804","title":"Program Module Vulnerability","description":"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.","status":"published","published":"2026-07-23T15:07:42.043Z","modified":"2026-07-23T18:16:05.366Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T14:20:04.809935Z"}],"euvd":[{"id":"EUVD-2026-48289","description":"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.","status":"published","published":"2026-07-23T15:07:42Z","modified":"2026-07-23T18:16:05Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T18:19:42.161106Z"}],"ghsa":[{"id":"GHSA-769r-j4hr-6567","title":"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara...","description":"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.","status":"published","published":"2026-07-23T18:31:44Z","modified":"2026-07-23T18:31:49Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","level":"medium"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T15:09:43.679745Z"}],"nvd":[{"id":"CVE-2026-11804","description":"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.","status":"published","published":"2026-07-23T16:17:13.273Z","modified":"2026-07-23T19:16:51.933Z","cvss":[{"version":"3.1","score":5.2,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-280"],"updated_at":"2026-11-02T14:12:32.473901Z"}]}}