SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:16 UTC
Importiert: 2026-10-01 06:47 UTC
CVSS: 5.9
Quelle-ID: full_disc
uid_hash: cfe3ebc7ca3999d274384909d71edb9da9356588239cff65090981e38240028d

Full Disclosure

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 26 SEC Consult Vulnerability Lab Security Advisory < 20260923-0 >

=======================================================================

           title: Local Privilege Escalation

         product: Honeywell IQ MultiAccess Update Service

vulnerable version: IQ V27 & IQ V28

   fixed version: IQ V27 SP1 & IQ V28 SP1

CVE number: CVE-2026-13742

impact: high

        homepage:...

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-13742	MEDIUM	5.9	MEDIUM	5.9			2026-06-29

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss