Northern.tech vulnerabilities

Products

• Cfengine 10
• Mender 7

Newest

• northern.tech cfengine Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command... CVE-2026-24712 Fix available 7.3 HighMay 14, 2026
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control. CVE-2026-24711 5.3 MediumMay 14, 2026
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS. CVE-2026-24710 6.1 MediumMay 14, 2026
• northern.tech mender Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control. CVE-2024-46948 4.3 MediumNovember 8, 2024
• northern.tech mender Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF. CVE-2024-46947 6.5 MediumNovember 8, 2024
• northern.tech mender Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect... CVE-2022-45929 8.8 HighJune 20, 2024
• northern.tech mender Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication. CVE-2024-37019 9.8 CriticalJune 3, 2024
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18... CVE-2023-45684 7.5 HighNovember 14, 2023
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to... CVE-2023-26560 6.5 MediumApril 25, 2023
• northern.tech mender The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It... CVE-2022-32290 4.3 MediumJuly 6, 2022
• northern.tech mender The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF... CVE-2022-29556 9.8 CriticalApril 28, 2022
• northern.tech mender The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2.... CVE-2022-29555 8.8 HighApril 28, 2022
• northern.tech cfengine Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow... CVE-2021-44215 5.5 MediumMarch 7, 2022
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions... CVE-2021-44216 5.5 MediumMarch 7, 2022
• northern.tech cfengine CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation. CVE-2021-36756 6.5 MediumOctober 27, 2021
• northern.tech cfengine The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local... CVE-2021-38379 5.5 MediumOctober 27, 2021
• northern.tech useradm The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in... CVE-2021-35342 7.5 HighAugust 27, 2021
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3... CVE-2019-19394 6.1 MediumApril 16, 2020