Back Gbhackers

Honeywell Controllers Widely Exposed Without Authentication

Gbhackers •Divya • March 4, 2026

Security researchers at Zero Science Lab have disclosed a critical vulnerability in Honeywell’s Trend IQ4xx series of Building Management System (BMS) controllers, revealing that the devices expose their full web-based Human-Machine Interface (HMI) without any authentication in their factory-default configuration. The advisory, tracked as ZSL-2026-5979, was publicly released on March 2, 2026, after months of […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Honeywell Trend IQ4xx Controllers Exposed Online Without Authentication Thousands of Honeywell Trend IQ4xx building-management controllers are accessible online without authentication, allowing unauthorized access to web-based controls. The vulnerability was disclosed by Zero Science Lab in advisory ZSL-2026-5979, which details the issue affecting devices in their factory-default configuration. The advisory was released on March 2, 2026, following months of research. 2 sources 26

Honeywell Controllers Widely Exposed Without Authentication

The full story

Extracted Entities

Companies (1)

Platforms (1)