CVE-2026-11804: Program Module Vulnerability
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.
This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Tridium Niagara Frameworkto a version that resolves this vulnerability.Fixed in 4.14.6 - Upgrade
Upgrade
Tridium Niagara Frameworkto a version that resolves this vulnerability.Fixed in 4.15.5 - Upgrade
Upgrade
Tridium Niagara Enterprise Securityto a version that resolves this vulnerability.Fixed in 4.14.6 - Upgrade
Upgrade
Tridium Niagara Enterprise Securityto a version that resolves this vulnerability.Fixed in 4.15.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11804?
The severity of CVE-2026-11804 is rated as medium with a score of 5.2.
How do I fix CVE-2026-11804?
Fix CVE-2026-11804 by updating to Niagara Framework version 4.14.6 or 4.15.5 and above.
What type of vulnerability is CVE-2026-11804?
CVE-2026-11804 is classified as a Privilege Abuse vulnerability due to improper handling of insufficient permissions.
Which software is affected by CVE-2026-11804?
CVE-2026-11804 affects the Tridium Niagara Framework and Tridium Niagara Enterprise Security on multiple operating systems.
What are the potential impacts of CVE-2026-11804?
The potential impacts of CVE-2026-11804 include unauthorized privilege escalation leading to security breaches.