CVE-2026-11804

EUVD-2026-48289
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.

This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
HoneywellCNA
5.2 MEDIUM
ADJACENT_NETWORK
LOW
HIGH
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
tridiumniagara
𝑥
< 4.14.6
CNA
tridiumniagara
𝑥
< 4.15.5
CNA
Common Weakness Enumeration
References
https://www.honeywell.com/us/en/product-security
https://www.tridium.com/us/en/product-security