PT-2026-42441 · Honeywell · Control Network Module

CVE-2026-5434 · Published 2026-05-21 · Updated 2026-05-21

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Honeywell Control Network Module (CNM) (affected versions not specified)

Description The software allows the insertion of sensitive information into an unintended directory. An attacker could exploit this issue by probing system files, which may lead to unauthorized access to protected data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-538

Related Identifiers

CVE-2026-5434

Affected Products

Control Network Module

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-5434 · Security Note
• https://process.honeywell.com · Patch
• https://twitter.com/CVEnew/status/2057407743166693542 · Twitter Post
• https://t.me/CVEtracker/54481 · Telegram Post