Honeywell CCTV Products Vulnerability Allows Account Takeover
Honeywell CCTV products have a critical vulnerability (CVE-2026-1670) that allows unauthenticated attackers to change recovery email addresses, leading to account takeovers and unauthorized access to camera feeds.
CVE References
Affected
The vulnerability in Honeywell's CCTV products (CVE-2026-1670) is critical as it allows unauthenticated attackers to manipulate recovery email addresses, enabling unauthorized access and potential network compromise. This issue affects multiple product versions, highlighting a significant flaw in their authentication mechanisms. Attackers could exploit this to gain control over camera feeds, posing serious risks to security systems relying on these devices. Immediate action is required by users to update affected products and monitor for any异常activity. The broader implication underscores the importance of securing IoT devices against unauthenticated attacks, especially those with network access capabilities.
Sources