# CVE-2026-11804

## Summary

- **CVE ID:** CVE-2026-11804
- **Severity:** MEDIUM
- **CVSS Score:** 5.2 (CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N)
- **CWE:** CWE-280
- **Published:** Jul 23, 2026
- **Last Modified:** Jul 24, 2026

## Description

Improper handling of insufficient permissions or privileges vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Privilege Abuse.

This issue affects Niagara Framework: before 4.14.6, before 4.15.5; Niagara Enterprise Security: before 4.14.6, before 4.15.5.

## Affected Products

- Tridium — Niagara Framework (0)
- Tridium — Niagara Enterprise Security (0)

## References

- [CNA](https://www.honeywell.com/us/en/product-security)
- [CNA](https://www.tridium.com/us/en/product-security)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.24%
- **EPSS Percentile:** 14.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._