Skip to content
OpenAdvisories

Archive

12 March 2026

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-3611 Public exploit

    Honeywell IQ4x BMS Controller Missing authentication for critical function

    The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 1…