Tridium Niagara Framework vulnerabilities

CVEs per yearBy the year they were published

1. 202510
2. 20261

Newest CVEs

• CVE-2026-11804

  Program Module Vulnerability

  Tridium · Niagara Framework

  Medium5.2
• CVE-2025-3945

  Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)

  Tridium · Niagara Framework

  High7.2
• CVE-2025-3944

  Incorrect Permission Assignment for Critical Resource

  Tridium · Niagara Framework

  High7.2
• CVE-2025-3943

  Use of GET Request Method With sensitive Query Strings

  Tridium · Niagara Framework

  Medium4.1
• CVE-2025-3942

  Improper Output Neutralization for Logs

  Tridium · Niagara Framework

  Medium4.3
• CVE-2025-3941

  Improper Handling of Windows: DATA Alternate Data Stream

  Tridium · Niagara Framework

  Medium5.4
• CVE-2025-3940

  Improper Use of Validation Framework

  Tridium · Niagara Framework

  Medium5.3
• CVE-2025-3939

  Observable Response Discrepancy

  Tridium · Niagara Framework

  Medium5.3
• CVE-2025-3938

  Missing Cryptographic Step

  Tridium · Niagara Framework

  Medium6.8
• CVE-2025-3937

  Use of Password Hash with Insufficient Computational Effort

  Tridium · Niagara Framework

  High7.7