CVE-2021-36756: Northern.tech Cfengine

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

CFEngine Enterprise 3.15.0 through 3.15.4 has Missing SSL Certificate Validation.

Affected products

• Northern.tech Cfengine: from 3.15.0, up to and including 3.15.4

Published 2021-10-27. Last modified 2026-06-17.