CVE-2026-24712

Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.

CVSS 3.1

7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-25)

CWE

CWE-77

Published

2026-05-14

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

Affected

• northern.tech:cfengine

References

• https://cfengine.com/blog/2026/cve-2026-24710-and-cve-2026-24711-and-cve-2026-24712/
• https://northern.tech

Check your stackJSON