PULSE
LIVE49signals / 24h
ES
FEED
ransomsafepay reclama a zinorm.de · DE · Not Foundransomsafepay reclama a moebelmayer.de · DE · Retail & E-Commerceransomsafepay reclama a paritaet-nrw.org · DE · Professional Servicesransomsafepay reclama a haugbuersten.de · DE · Retail & E-Commerceransomsafepay reclama a landesmuseum.de · DE · Educationransomsafepay reclama a hst.eu · DE · Not Foundransomsafepay reclama a braywoodschool.co.uk · GB · Educationransomsafepay reclama a weier.org · DE · Not Foundransomsafepay reclama a bnpdist.com · US · Retail & E-Commerceransomnightspire reclama a Kates Nussman Ellis Earle & Landolfi LLP · US · Professional Servicesransomchaos reclama a vit-best.com · RU · Educationransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Servicesransomsafepay reclama a zinorm.de · DE · Not Foundransomsafepay reclama a moebelmayer.de · DE · Retail & E-Commerceransomsafepay reclama a paritaet-nrw.org · DE · Professional Servicesransomsafepay reclama a haugbuersten.de · DE · Retail & E-Commerceransomsafepay reclama a landesmuseum.de · DE · Educationransomsafepay reclama a hst.eu · DE · Not Foundransomsafepay reclama a braywoodschool.co.uk · GB · Educationransomsafepay reclama a weier.org · DE · Not Foundransomsafepay reclama a bnpdist.com · US · Retail & E-Commerceransomnightspire reclama a Kates Nussman Ellis Earle & Landolfi LLP · US · Professional Servicesransomchaos reclama a vit-best.com · RU · Educationransomshinyhunters reclama a RingCentral, Inc. · US · Technologyransomshinyhunters reclama a Ernst & Young · US · Professional Servicesransomqilin reclama a Savills France · FR · Professional Services
← All CVEs
CVE WatchJul 27, 2026

CVE-2026-5433

Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnera

CVSS

9.1

Critical

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: May 21, 2026 · Last modified: Jul 27, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE).  Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].

Official references
Related CVEs

No related CVEs by CWE or product.