CVE-2026-5434

MediumCVSS 5.9

Published: 21/05/2026(UTC)Updated: 30/07/2026(UTC)Translated: 27/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

A vulnerability in Honeywell Control Network Module (CNM) where sensitive information is inserted into an unintended directory. An attacker can probe system files to gain unauthorized access to protected data.

Risk Assessment

Unauthorized access to sensitive system data could lead to information disclosure and breach of confidentiality.

Recommendation

Update Honeywell Control Network Module to version 200.1 or later as recommended by the vendor.

Other vulnerabilities in Honeywell Control Network Module

CVE-2026-5433Critical
The Honeywell Control Network Module (CNM) contains a command injection vulnerability in the web interface, exploitable by an attacker via command delimiters, potentially leading to remote code execution (RCE).

Original NVD description (English source)

Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].