Skip to content

Product

Tridium Niagara Framework vulnerabilities

11 published CVES affecting Tridium Niagara Framework, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
11
Critical
7
High
2
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest Tridium Niagara Framework CVEs

Newest publication first

  1. CVE-2026-11804 Program Module Vulnerability

    Published
    MediumCVSS 5.2 EPSS 0.24%

    Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Ni...

  3. CVE-2025-3944 Incorrect Permission Assignment for Critical Resource

    Published
    CriticalCVSS 9.8 EPSS 0.50%

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Sec...

  4. CVE-2025-3943 Use of GET Request Method With sensitive Query Strings

    Published
    HighCVSS 7.5 EPSS 11.4%

    Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, bef...

  5. CVE-2025-3942 Improper Output Neutralization for Logs

    Published
    HighCVSS 7.5 EPSS 0.31%

    Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11...

  6. CVE-2025-3941 Improper Handling of Windows: DATA Alternate Data Stream

    Published
    CriticalCVSS 9.8 EPSS 0.50%

    Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niag...

  7. CVE-2025-3940 Improper Use of Validation Framework

    Published
    CriticalCVSS 9.8 EPSS 0.37%

    Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; N...

  8. CVE-2025-3939 Observable Response Discrepancy

    Published
    MediumCVSS 5.3 EPSS 0.33%

    Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterpri...

  9. CVE-2025-3938 Missing Cryptographic Step

    Published
    CriticalCVSS 9.8 EPSS 0.33%

    Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Se...

  10. CVE-2025-3937 Use of Password Hash with Insufficient Computational Effort

    Published
    CriticalCVSS 9.8 EPSS 0.34%

    Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, befo...

  11. CVE-2025-3936 Incorrect Permission Assignment for Critical Resource

    Published
    CriticalCVSS 9.8 EPSS 0.37%

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Framework: before 4.14.2...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.