Medium severity · published Jul 27, 2026
CVE-2026-17612
Audit Log Exposure through Unauthorized Access
6.9
CVSS
0.5%
EPSS
No
On KEV
Description
Honeywell S35 Series 3M/5M/8M/PinHole Cameras, all versions prior to and including version HC5.26.1.14.20260207 contains an audit log disclosure Vulnerability that could allow an attacker to access audit logs without authentication, potentially resulting in the disclosure of sensitive information. Honeywell recommends updating to the latest available version (HC5.26.1.16.20260207) once available.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
S35 Series 3M/5M/8M/PinHole Cameras · Honeywell
HC4.25.1.27.20250728 through HC5.26.1.14.20260207 · source: vendor
Affected product
SS
S35 Series 3M/5M/8M/PinHole Cameras
Honeywell