CVE-2026-24712

Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.

CVSS v3.1 CNA

7.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.92% chance of exploitation in the next 30 days, 60th percentile

Published

2026-05-14

Updated

2026-05-15

Proof-of-concept exploits (1)

• J-Dheeraj/Final-Year-Project0★ · 2026-10-17

Security advisories

• https://cfengine.com/blog/2026/cve-2026-24710-and-cve-2026-24711-and-cve-2026-24712
• https://northern.tech

References

• CVE Record
• NVD entry

Related

• CVE-2025-11024
• CVE-2026-33626