CVE Daily – CFEngine (High+Critical) https://cvedaily.com/pages/tags/cfengine.html CVE Daily – CFEngine (High+Critical) en Wed, 03 Jun 2026 21:26:33 +0000 [High] CVE-2026-24712 – Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27... https://nvd.nist.gov/vuln/detail/CVE-2026-24712 https://nvd.nist.gov/vuln/detail/CVE-2026-24712 Thu, 14 May 2026 15:16:44 +0000 High CVE-2026-24712

Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.

CVSS: 7.3 · CWE: CWE-77

View on NVD

]]> [High] CVE-2023-45684 – Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed ... https://nvd.nist.gov/vuln/detail/CVE-2023-45684 https://nvd.nist.gov/vuln/detail/CVE-2023-45684 Tue, 14 Nov 2023 15:15:07 +0000 High CVE-2023-45684

Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection. The fixed versions are 3.18.6 and 3.21.3. The earliest affected version is 3.6.0. The issue is in the Mission Portal login page in the CFEngine hub.

CVSS: 7.5 · CWE: CWE-89

View on NVD

]]> [High] CVE-2019-9929 – Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions. https://nvd.nist.gov/vuln/detail/CVE-2019-9929 https://nvd.nist.gov/vuln/detail/CVE-2019-9929 Thu, 06 Jun 2019 17:29:00 +0000 High CVE-2019-9929

Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions.

CVSS: 8.8 · CWE: CWE-532

View on NVD

]]> [Critical] CVE-2004-1701 – Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for... https://nvd.nist.gov/vuln/detail/CVE-2004-1701 https://nvd.nist.gov/vuln/detail/CVE-2004-1701 Mon, 09 Aug 2004 04:00:00 +0000 Critical CVE-2004-1701

Heap-based buffer overflow in the AuthenticationDialogue function in cfservd for Cfengine 2.0.0 to 2.1.7p1 allows remote attackers to execute arbitrary code via a long SAUTH command during RSA authentication.

CVSS: 10.0 · CWE: N/A

View on NVD

]]> [High] CVE-2003-0849 – Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers t... https://nvd.nist.gov/vuln/detail/CVE-2003-0849 https://nvd.nist.gov/vuln/detail/CVE-2003-0849 Mon, 17 Nov 2003 05:00:00 +0000 High CVE-2003-0849

Buffer overflow in net.c for cfengine 2.x before 2.0.8 allows remote attackers to execute arbitrary code via certain packets with modified length values, which is trusted by the ReceiveTransaction function when using a buffer provided by the BusyWithConnection function.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Critical] CVE-2000-0947 – Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows... https://nvd.nist.gov/vuln/detail/CVE-2000-0947 https://nvd.nist.gov/vuln/detail/CVE-2000-0947 Tue, 19 Dec 2000 05:00:00 +0000 Critical CVE-2000-0947

Format string vulnerability in cfd daemon in GNU CFEngine before 1.6.0a11 allows attackers to execute arbitrary commands via format characters in the CAUTH command.

CVSS: 10.0 · CWE: N/A

View on NVD

]]>