PatchTheCVE: tridiumhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-3945: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Nihttps://patchthecve.com/cve/CVE-2025-3945.htmlhttps://patchthecve.com/cve/CVE-2025-3945.htmlWed, 17 Jun 2026 09:20:58 +0000HIGH 7.2: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows Command Delimiters. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara EnteCVE-2025-3944: Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridihttps://patchthecve.com/cve/CVE-2025-3944.htmlhttps://patchthecve.com/cve/CVE-2025-3944.htmlWed, 17 Jun 2026 09:20:58 +0000HIGH 7.2: Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on QNX, Tridium Niagara Enterprise Security on QNX allows File Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.2CVE-2025-3943: Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, https://patchthecve.com/cve/CVE-2025-3943.htmlhttps://patchthecve.com/cve/CVE-2025-3943.htmlWed, 17 Jun 2026 09:20:58 +0000MEDIUM 4.1: Use of GET Request Method With Sensitive Query Strings vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Parameter Injection. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; NiagaraCVE-2025-3942: Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Trihttps://patchthecve.com/cve/CVE-2025-3942.htmlhttps://patchthecve.com/cve/CVE-2025-3942.htmlWed, 17 Jun 2026 09:20:58 +0000MEDIUM 4.3: Improper Output Neutralization for Logs vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara EnterpriseCVE-2025-3941: Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windowhttps://patchthecve.com/cve/CVE-2025-3941.htmlhttps://patchthecve.com/cve/CVE-2025-3941.htmlWed, 17 Jun 2026 09:20:58 +0000MEDIUM 5.4: Improper Handling of Windows ::DATA Alternate Data Stream vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise SecurCVE-2025-3940: Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridiuhttps://patchthecve.com/cve/CVE-2025-3940.htmlhttps://patchthecve.com/cve/CVE-2025-3940.htmlWed, 17 Jun 2026 09:20:57 +0000MEDIUM 5.3: Improper Use of Validation Framework vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Input Data Manipulation. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise SeCVE-2025-3939: Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niahttps://patchthecve.com/cve/CVE-2025-3939.htmlhttps://patchthecve.com/cve/CVE-2025-3939.htmlWed, 17 Jun 2026 09:20:57 +0000MEDIUM 5.3: Observable Response Discrepancy vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before CVE-2025-3938: Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara https://patchthecve.com/cve/CVE-2025-3938.htmlhttps://patchthecve.com/cve/CVE-2025-3938.htmlWed, 17 Jun 2026 09:20:57 +0000MEDIUM 6.8: Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before 4.14.CVE-2025-3937: Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windhttps://patchthecve.com/cve/CVE-2025-3937.htmlhttps://patchthecve.com/cve/CVE-2025-3937.htmlWed, 17 Jun 2026 09:20:57 +0000HIGH 7.7: Use of Password Hash With Insufficient Computational Effort vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara CVE-2025-3936: Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Thttps://patchthecve.com/cve/CVE-2025-3936.htmlhttps://patchthecve.com/cve/CVE-2025-3936.htmlWed, 17 Jun 2026 09:20:57 +0000MEDIUM 6.5: Incorrect Permission Assignment for Critical Resource vulnerability in Tridium Niagara Framework on Windows, Tridium Niagara Enterprise Security on Windows allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, bef