CVE-2021-44216

CVE-2021-44216 affects Northern.tech CFEngine Enterprise: before 3.15.5 and, for 3.18.x, before 3.18.1, there are insecure permissions that may allow unauthorized local users to access the Apache and Mission Portal log files. Upgrading to CFEngine Enterprise 3.15.5 or 3.18.1 (or newer) is the doc...

CVE-2021-44215

CVE-2021-44215 and CVE-2021-44216 affect Northern.tech CFEngine Enterprise. CVE-2021-44215: CFEngine Enterprise 3.15.4 before 3.15.5 has insecure file permissions that may allow unauthorized local users to have an unspecified impact. CVE-2021-44216: CFEngine Enterprise versions before 3.15.5 and ...

CVE-2023-45684

The CVE-2023-45684 issue affects Northern.tech CFEngine Enterprise, specifically the Mission Portal login page. A SQL Injection vulnerability exists in CFEngine Hub’s Mission Portal, with earliest affected version 3.6.0 and a broad range up to 3.18.5 (for the 3.6.0–3.18.5 line) and 3.21.0–3.21.2 ...

CVE-2026-24711

Northern.tech CFEngine Enterprise versions prior to 3.21.8 , 3.24.3 , and 3.27.0 are vulnerable to Incorrect Access Control mechanisms. This flaw allows unauthorized access or actions within the multi-functional automation solution. While specific technical root causes and exploit links are not p...

CVE-2026-24712

Northern.tech CFEngine Enterprise and Community versions prior to 3.21.8 , 3.24.3 , and 3.27.0 are vulnerable to Command injection . While the technical root cause is not explicitly detailed in the provided documents, the vulnerability could allow an attacker to execute arbitrary commands on the ...

CVE-2026-24710

Northern.tech CFEngine Enterprise versions prior to 3.21.8, 3.24.3, and 3.27.0 are vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is identified as the improper cleaning of user input or improper escaping before the data is presented. This vulnerability allows an attacker to execu...