PT-2026-44072 · Unknown · Mender Enterprise Server

Rajveer · Published 2026-05-27 · Updated 2026-05-28 · CVE-2026-33552

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mender Enterprise Server versions prior to 4.1.1

Description Incorrect access control allows unauthorized users to perform actions they should not be permitted to execute.

Recommendations Update to version 4.1.1 or later.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2026-33552

Affected Products

Mender Enterprise Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-33552 · Security Note
• https://mender.io/blog/cve-2026-49009-cve-2026-33552-input-sanitization-and-access-control-issues-in-mender-server · Note
• https://reddit.com/r/CVEWatch/comments/1tpz4cf/top_10_trending_cves_28052026 · Reddit Post
• https://twitter.com/rajveer_0101/status/2059707803032555805 · Twitter Post
• https://northern.tech · Note