Skip to content
OpenAdvisories

Product · Honeywell

IQ4E

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-3611 Public exploit

    Honeywell IQ4x BMS Controller Missing authentication for critical function

    The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 1…

    Honeywell IQ3 IQ4E IQ422 ICS / OT