Honeywell International Inc. vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Honeywell International Inc. products: 2 record(s), with severity, exploitation and fixes.

Control Network Module (CNM) 2

Exploited only (KEV) →

CVE-2026-5434 Medium · 5.9 CWE-538 May 21, 2026

Improper storage of sensitive information

Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].

CVE-2026-5433 Critical · 9.1 CWE-77 May 21, 2026

Improper sanitization

Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE). Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].