CVE-2025-67903

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...

CVE-2026-33552

Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control...

Northern.tech Mender Enterprise Server 安全漏洞

Northern.tech Mender Enterprise Server is an enterprise-level device remote update and management platform developed by Northern.tech Corporation. Versions of Northern.tech Mender Enterprise Server prior to version 4.1.1 contained security vulnerabilities, which were caused by improper access...

PT-2026-44046

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...

CVE-2026-33552

CVE-2026-33552 affects Northern.tech Mender Enterprise Server prior to 4.1.1 with Incorrect Access Control. CVSSv3.1: NETWORK, HIGH complexity, NONE privileges, NO user interaction; impact limited to Confidentiality (Low) and no integrity/availability impact per the provided metrics. Red Hat and ...

CVE-2025-67903

CVE-2025-67903 affects Northern.tech Mender Client 5 prior to 5.0.4. The vulnerability is a cryptographic signature verification bypass. The provided documents do not include details on the root cause, vulnerable components beyond the client, or a confirmed remediation/patch version. No exploitat...

Malicious code in mender-convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287b36200e3e3bfaa56b44307f2cbc3f2deb931d055cfeb21ea49720e9dd9735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35757

Malicious code in mender-gateway npm...

Malicious code in mender-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7db45b762045779c0566cc967511852ceac9bebb9a2a09ceed1eda3c44c3e296 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de3cf7258b50c3fd2233ed366fed6714e44da530255103d045c71406b2ea081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview mender-convert is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in mender-flash (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d47579a45c1a2efddc746cda2163ebd2588c6d62f3b6349ae9ae21f43327b9a5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35763

Malicious code in mender-connect npm...

Malicious code in mender-gateway (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a1362b58dc19a9ff29ea00a5ac5b634c3b6aa179242d6cfd3daf6efedfac50a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mender-conductor-enterprise (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a94fd07c8d4a77f846cebefc65582f689ea864796af0d0cbff8241f82d31a97e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35764

Malicious code in mender-binary-delta npm...

EUVD-2025-35758

Malicious code in mender-flash npm...

Malicious Package

Overview mender-snapshot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mender-connect is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview mender-gateway is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...