CVE-2026-5434CWE-538

CVE-2026-5434

Medium · published May 21, 2026

CVSS v3.1
5.9
EPSS
0%
Percentile
25.2
In the wild
Unconfirmed
What it is

Honeywell Control

Network Module (CNM) contains

insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing

system files, potentially resulting in unintended

access to protected data.

Honeywell

recommends updating to the most recent version of this product, service or

offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00332 · 25.2th percentile
Weakness
CWE-538 · Insertion of Sensitive Information into Externally-Accessible File or Directory
Published
2026-05-21T13:16Z
References (1)
EPSS history
Timeline
  • 21 MAY 08:38Z
    Improper storage of sensitive information
    cvelistv5