VULNERABILITY INTELLIGENCE
CVE-2026-5434
CVSS score5.9 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2026-05-21
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].
Weakness classification
- psirt@honeywell.com: CWE-538