Back Securityaffairs.Co

CISA alerts to critical auth bypass CVE-2026

Securityaffairs.Co •Pierluigi Paganini • February 19, 2026

CISA warns Honeywell CCTVs are affected by a critical auth bypass flaw (CVE-2026-1670) allowing unauthorized access or account hijacking. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns that Honeywell CCTVs are affected by a critical authentication bypass flaw, tracked as CVE-2026-1670 (CVSS score of 9.8), that lets attackers change the recovery email without logging […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Honeywell CCTV Products Exposed to Critical Auth Bypass Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding a critical vulnerability in multiple Honeywell CCTV products, identified as CVE-2026-1670. Discovered by researcher Souvik Kanda, this flaw allows unauthorized access to video feeds and potential account hijacking, with a severity score of 9.8 due to missing authentication for critical functions. 7 sources 43

Extracted Entities

Companies (2)

CISA Honeywell

CVEs (1)

CVE-2026-1670