How many Tridium Niagara Framework CVEs are in CISA KEV?

None of Tridium Niagara Framework's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Tridium Niagara Framework are affected?

10 distinct Tridium Niagara Framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Tridium Niagara Framework CVEs?

Tridium Niagara Framework's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-1173 (Improper Use of Validation Framework), CWE-204 (Observable Response Discrepancy), CWE-280 (Improper Handling of Insufficient Permissions or Privileges).

How many critical Tridium Niagara Framework vulnerabilities are there?

Tridium Niagara Framework has 7 critical and 2 high-severity CVEs.

What is the average severity of Tridium Niagara Framework CVEs?

The average CVSS base score across Tridium Niagara Framework's scored CVEs is 8.6.

RadicalNotion.AI

Log in Create an account

Tridium

11 CVEs

Tridium Niagara Framework Vulnerabilities

Name: Tridium Niagara Framework vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Niagara Framework by Tridium.

11

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.6

Avg CVSS

2025–2026

Last updated July 23, 2026

Overview

Tridium Niagara Framework has 11 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.6. Affected platforms include linux, qnx, windows.

Severity and exploitation

How the CVSS severity of Tridium Niagara Framework's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Tridium Niagara Framework's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Tridium Niagara Framework CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Tridium Niagara Framework version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 4.10.1110 CVEs
< 4.14.210 CVEs
< 4.15.110 CVEs
< 4.14.61 CVE
< 4.15.51 CVE

Fixed in

4.10.1110 CVEs
4.14.210 CVEs
4.15.110 CVEs
4.14.61 CVE
4.15.51 CVE

Find a version

11 CVEs

Sort

Program Module Vulnerability
CVE-2026-11804
Patch
CWE-280
Medium · CVSS 5.2
EPSS 0.2% (14th pct)2026-07-23
Improper Neutralization of Argument Delimiters in a Command (‘Argument Injection’)
CVE-2025-3945
Patch
CWE-88
Critical · CVSS 9.8
EPSS 0.7% (50th pct)2025-05-22
Incorrect Permission Assignment for Critical Resource
CVE-2025-3944
Patch
CWE-732
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2025-05-22
Use of GET Request Method With sensitive Query Strings
CVE-2025-3943
Patch
CWE-598
High · CVSS 7.5
EPSS 10.7% (96th pct)2025-05-22
Improper Output Neutralization for Logs
CVE-2025-3942
Patch
CWE-117
High · CVSS 7.5
EPSS 0.3% (21th pct)2025-05-22
Improper Handling of Windows: DATA Alternate Data Stream
CVE-2025-3941
Patch
CWE-69
Critical · CVSS 9.8
EPSS 0.5% (43th pct)2025-05-22
Improper Use of Validation Framework
CVE-2025-3940
Patch
CWE-1173
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2025-05-22
Observable Response Discrepancy
CVE-2025-3939
Patch
CWE-204
Medium · CVSS 5.3
EPSS 0.3% (23th pct)2025-05-22
Missing Cryptographic Step
CVE-2025-3938
Patch
CWE-325
Critical · CVSS 9.8
EPSS 0.3% (27th pct)2025-05-22
Use of Password Hash with Insufficient Computational Effort
CVE-2025-3937
Patch
CWE-916
Critical · CVSS 9.8
EPSS 0.4% (28th pct)2025-05-22
Incorrect Permission Assignment for Critical Resource
CVE-2025-3936
Patch
CWE-732
Critical · CVSS 9.8
EPSS 0.4% (31th pct)2025-05-22

Common weakness types

The CWE weakness categories most often found in Tridium Niagara Framework CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Tridium Niagara Framework CVEs were published each year.

2025

10

2026

1

Other Tridium products

Browse vulnerabilities for other products by Tridium.

niagara14 CVEs Niagara Enterprise Security13 CVEs niagara ax6 CVEs niagara ax framework3 CVEs edge 101 CVEs jace 3e1 CVEs jace 6e1 CVEs jace 71 CVEs

All Tridium vulnerabilities

Frequently asked questions

Common questions about Tridium Niagara Framework vulnerabilities.

How many CVEs does Tridium Niagara Framework have?: Tridium Niagara Framework has 11 published CVE records since 2025.
How many Tridium Niagara Framework CVEs are in CISA KEV?: None of Tridium Niagara Framework's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Tridium Niagara Framework vulnerabilities?: No Tridium Niagara Framework CVEs currently have a tracked public exploit in this dataset.
Which versions of Tridium Niagara Framework are affected?: 10 distinct Tridium Niagara Framework versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Tridium Niagara Framework CVEs?: Tridium Niagara Framework's CVEs most often map to these CWE weakness types: CWE-732 (Incorrect Permission Assignment for Critical Resource), CWE-1173 (Improper Use of Validation Framework), CWE-204 (Observable Response Discrepancy), CWE-280 (Improper Handling of Insufficient Permissions or Privileges).
How many critical Tridium Niagara Framework vulnerabilities are there?: Tridium Niagara Framework has 7 critical and 2 high-severity CVEs.
What is the average severity of Tridium Niagara Framework CVEs?: The average CVSS base score across Tridium Niagara Framework's scored CVEs is 8.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Tridium Niagara Framework vulnerabilities

Get an alert for each new Tridium Niagara Framework CVE, with AI-written analysis and remediation steps.

Create an account See pricing