Back Cybersecuritynews

Thousand of Honeywell Controllers Exposed Online Without Authentication

Cybersecuritynews •Abinaya • March 4, 2026

Thousands of Honeywell building-management controllers may be accessible online with no login required, exposing web-based controls that can be abused to make unauthorized changes and trigger operator lockouts. Zero Science Lab has published advisory ZSL-2026-5979 (released 02 March 2026) detailing an unauthenticated access issue affecting Honeywell Trend IQ4xx BMS controllers in factory-default configuration. The IQ4 (Trend IQ4) […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Honeywell Trend IQ4xx Controllers Exposed Online Without Authentication Thousands of Honeywell Trend IQ4xx building-management controllers are accessible online without authentication, allowing unauthorized access to web-based controls. The vulnerability was disclosed by Zero Science Lab in advisory ZSL-2026-5979, which details the issue affecting devices in their factory-default configuration. The advisory was released on March 2, 2026, following months of research. 2 sources 26

Thousand of Honeywell Controllers Exposed Online Without Authentication

The full story

Extracted Entities

Companies (2)

Platforms (1)