Northern.tech Cfengine vulnerabilities

• northern.tech cfengine Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command... CVE-2026-24712 Fix available 7.3 HighMay 14, 2026
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control. CVE-2026-24711 5.3 MediumMay 14, 2026
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS. CVE-2026-24710 6.1 MediumMay 14, 2026
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18... CVE-2023-45684 7.5 HighNovember 14, 2023
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.21.1 allows a subset of authenticated users to... CVE-2023-26560 6.5 MediumApril 25, 2023
• northern.tech cfengine Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow... CVE-2021-44215 5.5 MediumMarch 7, 2022
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.15.5 and 3.18.x before 3.18.1 has Insecure Permissions... CVE-2021-44216 5.5 MediumMarch 7, 2022
• northern.tech cfengine CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation. CVE-2021-36756 6.5 MediumOctober 27, 2021
• northern.tech cfengine The Hub in CFEngine Enterprise 3.6.7 through 3.18.0 has Insecure Permissions that allow local... CVE-2021-38379 5.5 MediumOctober 27, 2021
• northern.tech cfengine Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3... CVE-2019-19394 6.1 MediumApril 16, 2020