CVE-2026-49009

Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal...

Northern.tech Mender Enterprise Server 安全漏洞

Northern.tech Mender Enterprise Server is an enterprise-level device remote update and management platform developed by Northern.tech Corporation. Versions of Northern.tech Mender Enterprise Server prior to version 4.1.1 contained security vulnerabilities, which were caused by improper access...

Northern.tech Mender Client 安全漏洞

The Northern.tech Mender Client is a device remote update and management client provided by the Northern.tech company in the United States. Versions of the Northern.tech Mender Client prior to version 5.0.4 contained security vulnerabilities, which were caused by bypassing encryption signature...

Northern.tech Mender Server 安全漏洞

Northern.tech Mender Server is an IoT server-side software developed by the American company Northern.tech. Versions of Northern.tech Mender Server such as 4.1.0, 4.0.1, and earlier have security vulnerabilities, which are due to a vulnerability that makes the system susceptible to directory...

CVE-2026-33552

Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control...

PT-2026-44046

Northern.tech Mender Client 5 before 5.0.4 allows a Cryptographic signature verification bypass...

CVE-2025-67903

CVE-2025-67903 affects Northern.tech Mender Client 5 prior to 5.0.4. The vulnerability is a cryptographic signature verification bypass. The provided documents do not include details on the root cause, vulnerable components beyond the client, or a confirmed remediation/patch version. No exploitat...

CVE-2026-33552

CVE-2026-33552 affects Northern.tech Mender Enterprise Server prior to 4.1.1 with Incorrect Access Control. CVSSv3.1: NETWORK, HIGH complexity, NONE privileges, NO user interaction; impact limited to Confidentiality (Low) and no integrity/availability impact per the provided metrics. Red Hat and ...

PT-2026-44081

Northern.tech Mender Server v4.1.0, v4.0.1 and below, and fixed in v4.1.1 and v4.0.2 allows Directory Traversal...

Malicious code in mender-convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287b36200e3e3bfaa56b44307f2cbc3f2deb931d055cfeb21ea49720e9dd9735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35759

Malicious code in mender-convert npm...

Malicious code in mender-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7de3cf7258b50c3fd2233ed366fed6714e44da530255103d045c71406b2ea081 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview mender-connect is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in mender-artifact (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e94134964d7a293444da55c5300ca285bae3eac4e6bf9a1f89cc1d9a94f2ceae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EUVD-2025-35764

Malicious code in mender-binary-delta npm...

EUVD-2025-35767

Malicious code in mender-conductor-enterprise npm...

Malicious Package

Overview mender-gateway is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2025-48572 Malicious code in mender-configure-module (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e954036412bb11454b4f5fb99bb6ac9b672d9b5542bdbaf870a9a0e20b444d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48578 Malicious code in mender-snapshot (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e55028420d641ba5efac6b963704e410ceddc79d03b1bb881525d553e3471d3a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-48574 Malicious code in mender-convert (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 287b36200e3e3bfaa56b44307f2cbc3f2deb931d055cfeb21ea49720e9dd9735 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...