CVE-2026-5434: Honeywell Control Network Module sensitive information disclosure

CVE-2026-5434 · Severity: medium · CVSS 5.9 · Published 2026-05-21

A vulnerability exists in the Honeywell Control Network Module (CNM), a component used in industrial automation environments to manage communications. The system incorrectly stores sensitive information in file directories that may be accessible to unauthorized parties. If exploited, an attacker could gain access to protected data, potentially compromising the confidentiality of industrial operations or system configurations.

Vendors: Honeywell.

Quick answers

Is CVE-2026-5434 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-5434 being exploited in the wild.
How severe is CVE-2026-5434?
Medium severity, with a CVSS score of 5.9, published 21 May 2026.
Which products and versions are affected?
Honeywell Control Network Module (CNM).
Is there a fix for CVE-2026-5434?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-5434 attacked?
It is attacked over the network.
Am I affected by CVE-2026-5434?
Check whether you run Honeywell Control Network Module. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Honeywell Control Network Module (CNM) is vulnerable to CWE-538 (Insertion of Sensitive Information into Externally-Accessible File or Directory). The vulnerability stems from the system placing sensitive information into directories that are not properly restricted. An attacker can exploit this over the network by probing system files to locate and extract protected data. While the attack vector is network-based, the complexity is rated as high, suggesting specific conditions or timing may be required to successfully intercept or locate the sensitive files. No authentication is required for the initial probing phase.

Affected products

  • Honeywell Control Network Module (CNM)

Timeline

  • 2026-05-21: disclosed: Initial publication of the CVE record.
  • 2026-05-21: advisory

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.