Skip to content
OpenAdvisories

Product · Tridium

Niagara Framework

11 known vulnerabilities.

Niagara Framework at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 2025100
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Medium 5.2
    CVE-2026-11804

    Program Module Vulnerability

    Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14…

    Tridium Niagara Enterprise Security Niagara Framework
  • High 7.2
    CVE-2025-3945

    Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

    Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, be…

    Tridium Niagara Enterprise Security Niagara Framework
  • High 7.2
    CVE-2025-3944

    Incorrect Permission Assignment for Critical Resource

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; N…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 4.1
    CVE-2025-3943 EPSS 11%

    Use of GET Request Method With sensitive Query Strings

    Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 4.3
    CVE-2025-3942

    Improper Output Neutralization for Logs

    Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 5.4
    CVE-2025-3941

    Improper Handling of Windows: DATA Alternate Data Stream

    Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1,…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 5.3
    CVE-2025-3940

    Improper Use of Validation Framework

    Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 5.3
    CVE-2025-3939

    Observable Response Discrepancy

    Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10…

    Tridium Niagara Framework Niagara Enterprise Security
  • Medium 6.8
    CVE-2025-3938

    Missing Cryptographic Step

    Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; …

    Tridium Niagara Enterprise Security Niagara Framework
  • High 7.7
    CVE-2025-3937

    Use of Password Hash with Insufficient Computational Effort

    Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2…

    Tridium Niagara Enterprise Security Niagara Framework
  • Medium 6.5
    CVE-2025-3936

    Incorrect Permission Assignment for Critical Resource

    Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Fra…

    Tridium Niagara Framework Niagara Enterprise Security