Honeywell Trend IQ4xx Controllers Exposed Online Without Authentication

Honeywell Trend IQ4xx Controllers Exposed Online Without Authentication

First seen 4 Mar 2026, 14:10 UTC GbhackersCybersecuritynews 86% similarity 26.3

Article Content

Browse articles
ThreatCluster

Thousands of Honeywell Trend IQ4xx building-management controllers are accessible online without authentication, allowing unauthorized access to web-based controls. The vulnerability was disclosed by Zero Science Lab in advisory ZSL-2026-5979, which details the issue affecting devices in their factory-default configuration. The advisory was released on March 2, 2026, following months of research.

ThreatCluster AI How this analysis works

Timeline

2026-03-02
Zero Science Lab released advisory ZSL-2026-5979
2026-03-04
Cybersecurity news articles published about the exposure

Community

Browse all →