Vulnerability-Lookup

CVE-2026-11804 (GCVE-0-2026-11804)

Vulnerability from cvelistv5 – Published: 2026-07-23 15:07 – Updated: 2026-07-23 18:16

Title

Program Module Vulnerability

Summary

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse. This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.

Severity

5.2 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-280 - Improper handling of insufficient permissions or privileges

Assigner

Honeywell

References

2 references

URL	Tags
https://www.honeywell.com/us/en/product-security
https://www.tridium.com/us/en/product-security

Impacted products

2 products

Vendor	Product	Version
Tridium	Niagara Framework	Affected: 0 , < 4.14.6 (custom) Affected: 0 , < 4.15.5 (custom)
Tridium	Niagara Enterprise Security	Affected: 0 , < 4.14.6 (custom) Affected: 0 , < 4.15.5 (custom)

Credits

Umut Pirkoca

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-11804",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-23T18:15:31.790870Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-23T18:16:05.366Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "QNX"
          ],
          "product": "Niagara Framework",
          "vendor": "Tridium",
          "versions": [
            {
              "lessThan": "4.14.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "4.15.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows",
            "Linux",
            "QNX"
          ],
          "product": "Niagara Enterprise Security",
          "vendor": "Tridium",
          "versions": [
            {
              "lessThan": "4.14.6",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            },
            {
              "lessThan": "4.15.5",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Umut Pirkoca"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\u003cp\u003eThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.\u003c/p\u003e"
            }
          ],
          "value": "Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-122",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-122 Privilege Abuse"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-280",
              "description": "CWE-280 Improper handling of insufficient permissions or privileges",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-23T15:07:42.043Z",
        "orgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d",
        "shortName": "Honeywell"
      },
      "references": [
        {
          "url": "https://www.honeywell.com/us/en/product-security"
        },
        {
          "url": "https://www.tridium.com/us/en/product-security"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Tridium recommends upgrading to one of the following versions:\u003cbr\u003e\u003cul\u003e\u003cli\u003eNiagara Framework 4.14u6\u003c/li\u003e\u003cli\u003eNiagara Enterprise Security 4.14u6\u003c/li\u003e\u003cli\u003eNiagara Framework 4.15u5\u003c/li\u003e\u003cli\u003eNiagara Enterprise Security 4.15u5\u003c/li\u003e\u003c/ul\u003e\u003cdiv\u003eor applying the following patched modules\u003c/div\u003e\u003cdiv\u003e\u003cul\u003e\u003cli\u003eprogram-rt.jar version 4.14.5.22.1\u003c/li\u003e\u003cli\u003eprogram-rt.jar version 4.15.4.24.1\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e"
            }
          ],
          "value": "Tridium recommends upgrading to one of the following versions:\n  *  Niagara Framework 4.14u6\n  *  Niagara Enterprise Security 4.14u6\n  *  Niagara Framework 4.15u5\n  *  Niagara Enterprise Security 4.15u5\n\n\nor applying the following patched modules\n\n  *  program-rt.jar version 4.14.5.22.1\n  *  program-rt.jar version 4.15.4.24.1"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Program Module Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0dc86260-d7e3-4e81-ba06-3508e030ce8d",
    "assignerShortName": "Honeywell",
    "cveId": "CVE-2026-11804",
    "datePublished": "2026-07-23T15:07:42.043Z",
    "dateReserved": "2026-06-09T15:04:29.906Z",
    "dateUpdated": "2026-07-23T18:16:05.366Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-11804",
      "date": "2026-07-24",
      "epss": "0.0015",
      "percentile": "0.04667"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-11804\",\"sourceIdentifier\":\"psirt@honeywell.com\",\"published\":\"2026-07-23T16:17:13.273\",\"lastModified\":\"2026-07-23T19:16:51.933\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\\n\\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.\"}],\"affected\":[{\"source\":\"psirt@honeywell.com\",\"affectedData\":[{\"vendor\":\"Tridium\",\"product\":\"Niagara Framework\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\",\"Linux\",\"QNX\"],\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.14.6\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.15.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Tridium\",\"product\":\"Niagara Enterprise Security\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Windows\",\"Linux\",\"QNX\"],\"versions\":[{\"version\":\"0\",\"lessThan\":\"4.14.6\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.15.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@honeywell.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N\",\"baseScore\":5.2,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.9,\"impactScore\":4.2}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-07-23T18:15:31.790870Z\",\"id\":\"CVE-2026-11804\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@honeywell.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-280\"}]}],\"references\":[{\"url\":\"https://www.honeywell.com/us/en/product-security\",\"source\":\"psirt@honeywell.com\"},{\"url\":\"https://www.tridium.com/us/en/product-security\",\"source\":\"psirt@honeywell.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-11804\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-07-23T18:15:31.790870Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-07-23T18:16:00.703Z\"}}], \"cna\": {\"title\": \"Program Module Vulnerability\", \"source\": {\"discovery\": \"UNKNOWN\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"reporter\", \"value\": \"Umut Pirkoca\"}], \"impacts\": [{\"capecId\": \"CAPEC-122\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-122 Privilege Abuse\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 5.2, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"HIGH\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Tridium\", \"product\": \"Niagara Framework\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"4.14.6\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"4.15.5\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\", \"Linux\", \"QNX\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Tridium\", \"product\": \"Niagara Enterprise Security\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"4.14.6\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"4.15.5\", \"versionType\": \"custom\"}], \"platforms\": [\"Windows\", \"Linux\", \"QNX\"], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Tridium recommends upgrading to one of the following versions:\\n  *  Niagara Framework 4.14u6\\n  *  Niagara Enterprise Security 4.14u6\\n  *  Niagara Framework 4.15u5\\n  *  Niagara Enterprise Security 4.15u5\\n\\n\\nor applying the following patched modules\\n\\n  *  program-rt.jar version 4.14.5.22.1\\n  *  program-rt.jar version 4.15.4.24.1\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Tridium recommends upgrading to one of the following versions:\u003cbr\u003e\u003cul\u003e\u003cli\u003eNiagara Framework 4.14u6\u003c/li\u003e\u003cli\u003eNiagara Enterprise Security 4.14u6\u003c/li\u003e\u003cli\u003eNiagara Framework 4.15u5\u003c/li\u003e\u003cli\u003eNiagara Enterprise Security 4.15u5\u003c/li\u003e\u003c/ul\u003e\u003cdiv\u003eor applying the following patched modules\u003c/div\u003e\u003cdiv\u003e\u003cul\u003e\u003cli\u003eprogram-rt.jar version 4.14.5.22.1\u003c/li\u003e\u003cli\u003eprogram-rt.jar version 4.15.4.24.1\u003c/li\u003e\u003c/ul\u003e\u003c/div\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.honeywell.com/us/en/product-security\"}, {\"url\": \"https://www.tridium.com/us/en/product-security\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.2\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\\n\\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\u003cp\u003eThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-280\", \"description\": \"CWE-280 Improper handling of insufficient permissions or privileges\"}]}], \"providerMetadata\": {\"orgId\": \"0dc86260-d7e3-4e81-ba06-3508e030ce8d\", \"shortName\": \"Honeywell\", \"dateUpdated\": \"2026-07-23T15:07:42.043Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-11804\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-23T18:16:05.366Z\", \"dateReserved\": \"2026-06-09T15:04:29.906Z\", \"assignerOrgId\": \"0dc86260-d7e3-4e81-ba06-3508e030ce8d\", \"datePublished\": \"2026-07-23T15:07:42.043Z\", \"assignerShortName\": \"Honeywell\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

GHSA-769R-J4HR-6567

Vulnerability from github – Published: 2026-07-23 18:31 – Updated: 2026-07-23 18:31

Details

This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.

Severity

5.2 (Medium)


                  
                    CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-11804"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-280"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-07-23T16:17:13Z",
    "severity": "MODERATE"
  },
  "details": "Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.\n\nThis issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.",
  "id": "GHSA-769r-j4hr-6567",
  "modified": "2026-07-23T18:31:44Z",
  "published": "2026-07-23T18:31:44Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-11804"
    },
    {
      "type": "WEB",
      "url": "https://www.honeywell.com/us/en/product-security"
    },
    {
      "type": "WEB",
      "url": "https://www.tridium.com/us/en/product-security"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-11804 (GCVE-0-2026-11804)

GHSA-769R-J4HR-6567

Tags

Sightings

Nomenclature