CVE-2026-5433
⛔ criticalSummary
Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE). Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].
CVSS Score
9.1
Critical
EPSS Score
1.0
Exploit Probability
Published Date
2026-05-21
First Seen: 2026-05-22
📊 Relative Risk Intelligence
This CVE is High Risk - more severe than 87.6% of all 353,401 vulnerabilities in our database.
#43,992
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 21, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
🏆 Discovered By
Andreas Krämer, BASF Digital Solutions GmbH
Martin Floeck, BASF Digital Solutions GmbH
Stefan Stahl, BASF Digital Solutions GmbH
SSVC data provided by
CISA
Last Modified
2026-07-30
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CWE IDs (Weakness Types)