Is CVE-2026-17612 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-17612 being exploited in the wild.

How severe is CVE-2026-17612?

Informational severity, with a CVSS score of 6.9, published 27 July 2026.

Which products and versions are affected?

Honeywell S35 Series 3M Camera All versions prior to and including HC5.26.1.14.20260207; Honeywell S35 Series 5M Camera All versions prior to and including HC5.26.1.14.20260207; Honeywell S35 Series 8M Camera All versions prior to and including HC5.26.1.14.20260207; Honeywell S35 Series PinHole Camera All versions prior to and including HC5.26.1.14.20260207.

Is there a fix for CVE-2026-17612?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-17612 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-17612?

Check whether you run Honeywell S35 Series 3M Camera, Honeywell S35 Series 5M Camera, Honeywell S35 Series 8M Camera or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-17612: Honeywell S35 Series Cameras audit log disclosure

CVE-2026-17612 · Severity: info · CVSS 6.9 · Published 2026-07-27

Honeywell S35 series security cameras contain a vulnerability that allows unauthorized individuals to view the device's audit logs. These logs track system activity and may contain sensitive information about the camera's operation or user interactions. An attacker could exploit this to gather intelligence about the security environment without needing a password.

Vendors: Honeywell.

Quick answers

Is CVE-2026-17612 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-17612 being exploited in the wild.
How severe is CVE-2026-17612?: Informational severity, with a CVSS score of 6.9, published 27 July 2026.
Which products and versions are affected?: Honeywell S35 Series 3M Camera All versions prior to and including HC5.26.1.14.20260207; Honeywell S35 Series 5M Camera All versions prior to and including HC5.26.1.14.20260207; Honeywell S35 Series 8M Camera All versions prior to and including HC5.26.1.14.20260207; Honeywell S35 Series PinHole Camera All versions prior to and including HC5.26.1.14.20260207.
Is there a fix for CVE-2026-17612?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-17612 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-17612?: Check whether you run Honeywell S35 Series 3M Camera, Honeywell S35 Series 5M Camera, Honeywell S35 Series 8M Camera or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability in the Honeywell S35 Series 3M/5M/8M/PinHole Cameras (versions up to HC5.26.1.14.20260207) allows for the disclosure of audit logs to unauthenticated actors. Categorized as CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), the flaw stems from improper access controls on the log retrieval mechanism. A remote attacker can access these logs over the network without providing credentials. This could lead to the exposure of sensitive operational data or metadata contained within the system logs. Honeywell recommends upgrading to version HC5.26.1.16.20260207 or later to remediate the issue.

Affected products

Honeywell S35 Series 3M/5M/8M/PinHole Cameras All versions prior to and including HC5.26.1.14.20260207

Timeline

2026-07-27: disclosed
2026-07-27: advisory

References

https://myhoneywellbuildingsuniversity.com/training/asp_support_download_center

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.