CVE-2026-5434
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory.
Published May 21, 2026 · updated Oct 14, 2026
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].
Timeline
Detection, updates, and resolution for this record.
May 21, 2026 · NIST NVD
Detected
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.
Oct 14, 2026 · NIST NVD
Updated
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.
Sources
- CVE.orgCVE-2026-5434
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-5434
30-day exploitation probability 0.3%
first.org - NIST NVDCVE-2026-5434
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updati
nvd.nist.gov