CVE-2026-24712

HIGH 7.3CVE-2026-24712 · Published 14/05/2026 · updated 19/10/2026

In short

CVE-2026-24712 is a HIGH (CVSS 7.3) vulnerability affecting cfengine (northern.tech).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.3% of all vulnerabilities.
Fix: update to 3.24.3, 3.21.8 or later.

Package	Affected versions	Patched versions
cfengine northern.tech	`= 3.26.0≥ 3.24.0, < 3.24.3< 3.21.8`	`3.24.33.21.8`

Northern.tech CFEngine Enterprise and Community before 3.21.8, 3.24.3, and 3.27.0 allows Command injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.