CVE-2026-17612 Honeywell CVE debrief

Who should care

Organizations using Honeywell S35 Series cameras, particularly those in security-sensitive environments, should be aware of this vulnerability and take steps to mitigate it. This includes reviewing and verifying the integrity of audit logs, implementing additional authentication and access controls for audit logs, and updating to the latest available version once available. Security teams should prioritize this vulnerability due to its potential impact on sensitive information disclosure and operational security.

Technical summary

The Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207, contain an audit log disclosure vulnerability. This vulnerability could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information. The vulnerability is due to inadequate access controls on audit logs, which could be exploited by an attacker to gain unauthorized access to sensitive information.

Defensive priority

Medium priority due to potential sensitive information disclosure

Recommended defensive actions

• Update to the latest available version (HC5.26.1.16.20260207) once available
• Review and verify the integrity of audit logs
• Implement additional authentication and access controls for audit logs
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide information about the audit log disclosure vulnerability in Honeywell S35 Series cameras. Evidence is limited, and further verification is needed to confirm affected versions and potential impact. Defenders should verify the integrity of audit logs, review system configurations, and implement additional authentication and access controls for audit logs.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.