Advisoriesby IbisHoneywellCVE-2026-11804
Honeywell Niagara: improper permission handling
Fix: upgrade to Framework 4.14.6 or later (3 fixed versions below)
Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.
This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Niagara Enterprise Security Product | < 4.14.6 | 4.14.6 |
| < 4.15.5 | 4.15.5 | |
| Niagara Framework Product | < 4.14.6 | 4.14.6 |
| < 4.15.5 | 4.15.5 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-280