Control Network Module (cnm) CVEs and Security Vulnerabilities

CVE-2026-5433

Improper sanitization

Honeywell Control Network Module (CNM) contains command injection vulnerability in the web interface. An attacker could exploit this vulnerability via command delimiters, potentially resulting in Remote Code Execution (RCE). Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Honeywell

Products

Control Network Module (cnm)

CVE-2026-5434

Improper storage of sensitive information

Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory. An attacker could exploit this vulnerability through probing system files, potentially resulting in unintended access to protected data. Honeywell recommends updating to the most recent version of this product, service or offering [200.1]. The CNM versions affected are from [100.1, 101.1, 110.1, and 110.2].

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed