CVE-2026-17612— Audit Log Exposure through Unauthorized Access
Possible ATT&CK Techniques 1AI
T1530 · Data from Cloud StorageAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Honeywell | S35 Series 3M/5M/8M/PinHole Cameras | HC4.25.1.27.20250728≤ HC5.26.1.14.20260207 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-17612
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Audit Log Exposure through Unauthorized Access
Source: CVE Program / CVE List V5
Vulnerability Description
Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information. Honeywell recommends updating to the latest available version (HC5.26.1.16.20260207) once available.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
Honeywell S35 Series 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Honeywell S35 Series是美国Honeywell公司的一款视频监控摄像头。 Honeywell S35 Series 3M/5M/8M/PinHole Cameras HC5.26.1.14.20260207及之前版本存在信息泄露漏洞，该漏洞源于审计日志泄露，允许攻击者未经身份验证访问审计日志，导致敏感信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Honeywell | S35 Series 3M/5M/8M/PinHole Cameras | HC4.25.1.27.20250728 ~ HC5.26.1.14.20260207 | - |
II. Public POCs for CVE-2026-17612
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17612
请登录查看更多情报信息。
Other References for CVE-2026-17612 (1)
IV. Related Vulnerabilities
Same vendor: Honeywell
- CVE-2026-4272
CVE-2026-4272 - Bluetooth Remote Execution of System Command - CVE-2026-3611
Honeywell IQ4x BMS Controller Missing authentication for cri - CVE-2026-1670
Honeywell CCTV Products Missing Authentication for Critical - CVE-2021-47868
WIN-PACK PRO 4.8 - 'WPCommandFileService' Unquoted Service P - CVE-2021-47866
WIN-PACK PRO 4.8 - 'GuardTourService' Unquoted Service Path
Same weakness: CWE-200
- CVE-2026-11985
Cross-thread FPU register leak on ARM when FPU enabled witho - CVE-2026-72915
Mastodon: Personally-identifying information disclosure due - CVE-2026-72873
Dokploy: Cross-tenant Git provider secrets are disclosed to - CVE-2026-72726
Discourse: Unauthorized eavesdropping on private AI bot conv - CVE-2026-72760
cti-transmute Following List Exposes User Email Addresses to
V. Comments for CVE-2026-17612
No comments yet