CVE-2026-1670
Honeywell CCTV Products Missing Authentication for Critical Function
The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.
CVSS 4.0 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products