CVE-2026-11804

Summary

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.

This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.

Affected Software

VendorProductVersion RangeStatus
TridiumNiagara Framework0 < 4.14.6affected
TridiumNiagara Framework0 < 4.15.5affected
TridiumNiagara Enterprise Security0 < 4.14.6affected
TridiumNiagara Enterprise Security0 < 4.15.5affected

Weaknesses

  • CWE-280: CWE-280 Improper handling of insufficient permissions or privileges

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References