{"schema_version":1,"title":"Northern.tech vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Northern.tech: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-33553, was published on 2 June 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/northern-tech","json_url":"https://junglewise.ai/threats/vendors/northern-tech.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/northern-tech","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":1,"all_time":7,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":7},"latest":[{"cve":"CVE-2026-33553","cvss":0,"slug":"cve-2026-33553-northern-tech-cfengine-enterprise-xss-in-mission-portal","title":"Northern.tech CFEngine Enterprise XSS in Mission Portal","severity":"info","exploited":false,"published_at":"2026-06-02T20:16:34.497+00:00","url":"https://junglewise.ai/threats/cve-2026-33553-northern-tech-cfengine-enterprise-xss-in-mission-portal"},{"cve":"CVE-2026-49009","cvss":8.8,"slug":"cve-2026-49009-northern-tech-mender-server-directory-traversal-in-artifact","title":"Northern.tech Mender Server directory traversal in artifact creation endpoint","severity":"info","exploited":false,"published_at":"2026-05-27T20:16:41.93+00:00","url":"https://junglewise.ai/threats/cve-2026-49009-northern-tech-mender-server-directory-traversal-in-artifact"},{"cve":"CVE-2026-33552","cvss":0,"slug":"cve-2026-33552-northern-tech-mender-enterprise-server-incorrect-access-control","title":"Northern.tech Mender Enterprise Server incorrect access control in Device Group RBAC","severity":"info","exploited":false,"published_at":"2026-05-27T20:16:35.947+00:00","url":"https://junglewise.ai/threats/cve-2026-33552-northern-tech-mender-enterprise-server-incorrect-access-control"},{"cve":"CVE-2025-67903","cvss":0,"slug":"cve-2025-67903-northern-tech-mender-client-signature-verification-bypass","title":"Northern.tech Mender Client signature verification bypass","severity":"info","exploited":false,"published_at":"2026-05-27T18:16:21.507+00:00","url":"https://junglewise.ai/threats/cve-2025-67903-northern-tech-mender-client-signature-verification-bypass"},{"cve":"CVE-2026-24712","cvss":7.3,"epss":0.0287,"slug":"cve-2026-24712-northern-tech-cfengine-command-injection-in-policy-language","title":"Northern.tech CFEngine command injection in policy language","severity":"high","exploited":false,"published_at":"2026-05-14T15:16:44.977+00:00","url":"https://junglewise.ai/threats/cve-2026-24712-northern-tech-cfengine-command-injection-in-policy-language"},{"cve":"CVE-2026-24711","cvss":5.3,"epss":0.0003,"slug":"cve-2026-24711-northern-tech-cfengine-enterprise-privilege-escalation-in-mission","title":"Northern.tech CFEngine Enterprise privilege escalation in Mission Portal","severity":"medium","exploited":false,"published_at":"2026-05-14T15:16:44.86+00:00","url":"https://junglewise.ai/threats/cve-2026-24711-northern-tech-cfengine-enterprise-privilege-escalation-in-mission"},{"cve":"CVE-2026-24710","cvss":6.1,"epss":0.0003,"slug":"cve-2026-24710-northern-tech-cfengine-enterprise-injection-vulnerabilities-in","title":"Northern.tech CFEngine Enterprise Injection Vulnerabilities in Mission Portal","severity":"medium","exploited":false,"published_at":"2026-05-14T15:16:44.71+00:00","url":"https://junglewise.ai/threats/cve-2026-24710-northern-tech-cfengine-enterprise-injection-vulnerabilities-in"}],"vendor":{"hub":true,"name":"Northern.tech","slug":"northern-tech","homepage":"https://northern.tech/","description":"Northern.tech is the company behind the Mender open-source over-the-air software update manager for IoT devices.","url":"https://junglewise.ai/threats/vendors/northern-tech"},"weekly":[{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-24712","cvss":7.3,"epss":0.0287,"slug":"cve-2026-24712-northern-tech-cfengine-command-injection-in-policy-language","title":"Northern.tech CFEngine command injection in policy language","severity":"high","exploited":false,"published_at":"2026-05-14T15:16:44.977+00:00","url":"https://junglewise.ai/threats/cve-2026-24712-northern-tech-cfengine-command-injection-in-policy-language"},{"cve":"CVE-2026-24710","cvss":6.1,"epss":0.0003,"slug":"cve-2026-24710-northern-tech-cfengine-enterprise-injection-vulnerabilities-in","title":"Northern.tech CFEngine Enterprise Injection Vulnerabilities in Mission Portal","severity":"medium","exploited":false,"published_at":"2026-05-14T15:16:44.71+00:00","url":"https://junglewise.ai/threats/cve-2026-24710-northern-tech-cfengine-enterprise-injection-vulnerabilities-in"},{"cve":"CVE-2026-24711","cvss":5.3,"epss":0.0003,"slug":"cve-2026-24711-northern-tech-cfengine-enterprise-privilege-escalation-in-mission","title":"Northern.tech CFEngine Enterprise privilege escalation in Mission Portal","severity":"medium","exploited":false,"published_at":"2026-05-14T15:16:44.86+00:00","url":"https://junglewise.ai/threats/cve-2026-24711-northern-tech-cfengine-enterprise-privilege-escalation-in-mission"},{"cve":"CVE-2026-49009","cvss":8.8,"slug":"cve-2026-49009-northern-tech-mender-server-directory-traversal-in-artifact","title":"Northern.tech Mender Server directory traversal in artifact creation endpoint","severity":"info","exploited":false,"published_at":"2026-05-27T20:16:41.93+00:00","url":"https://junglewise.ai/threats/cve-2026-49009-northern-tech-mender-server-directory-traversal-in-artifact"},{"cve":"CVE-2026-33553","cvss":0,"slug":"cve-2026-33553-northern-tech-cfengine-enterprise-xss-in-mission-portal","title":"Northern.tech CFEngine Enterprise XSS in Mission Portal","severity":"info","exploited":false,"published_at":"2026-06-02T20:16:34.497+00:00","url":"https://junglewise.ai/threats/cve-2026-33553-northern-tech-cfengine-enterprise-xss-in-mission-portal"},{"cve":"CVE-2026-33552","cvss":0,"slug":"cve-2026-33552-northern-tech-mender-enterprise-server-incorrect-access-control","title":"Northern.tech Mender Enterprise Server incorrect access control in Device Group RBAC","severity":"info","exploited":false,"published_at":"2026-05-27T20:16:35.947+00:00","url":"https://junglewise.ai/threats/cve-2026-33552-northern-tech-mender-enterprise-server-incorrect-access-control"},{"cve":"CVE-2025-67903","cvss":0,"slug":"cve-2025-67903-northern-tech-mender-client-signature-verification-bypass","title":"Northern.tech Mender Client signature verification bypass","severity":"info","exploited":false,"published_at":"2026-05-27T18:16:21.507+00:00","url":"https://junglewise.ai/threats/cve-2025-67903-northern-tech-mender-client-signature-verification-bypass"}],"generated_at":"2026-09-28T03:07:00.154823+00:00","technologies":[{"name":"Northern.tech CFEngine Enterprise","slug":"cfengine-enterprise","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/cfengine-enterprise"}]}