CVE-2026-5434
🔶 mediumSummary
Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].
CVSS Score
5.9
Medium
EPSS Score
0.2
Exploit Probability
Published Date
2026-05-21
First Seen: 2026-05-22
📊 Relative Risk Intelligence
This CVE is Lower Risk - more severe than 32.2% of all 360,729 vulnerabilities in our database.
#244,728
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 21, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
🏆 Discovered By
Andreas Krämer, BASF Digital Solutions GmbH
Martin Floeck, BASF Digital Solutions GmbH
Stefan Stahl, BASF Digital Solutions GmbH
SSVC data provided by
CISA
Last Modified
2026-07-30
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE IDs (Weakness Types)