PT-2026-45827 · Undefined · Undefined

Tahmid Akbar Omim · CVE-2026-33553 · Published 2026-06-02 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CFEngine Enterprise version 3.24.3 CFEngine Enterprise version 3.27.0

Description Cross-site Scripting (XSS) is possible, which occurs when an application includes untrusted data in a web page without proper validation or escaping, allowing an attacker to execute malicious scripts in the victim's browser.

Recommendations Update CFEngine Enterprise version 3.24.3 to 3.24.4. Update CFEngine Enterprise version 3.27.0 to 3.27.1.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2026-33553

Affected Products

Undefined

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-33553 · Security Note
• https://cfengine.com/blog/2026/cve-2026-33553-xss-in-mission-portal · Note
• https://northern.tech · Note