https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3611.htmlhttps://patchthecve.com/cve/CVE-2026-3611.htmlWed, 17 Jun 2026 10:43:52 +0000CRITICAL 10.0: The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 100) context, granting read/write privileghttps://patchthecve.com/cve/CVE-2025-2605.htmlhttps://patchthecve.com/cve/CVE-2025-2605.htmlWed, 17 Jun 2026 09:07:16 +0000CRITICAL 9.9: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Honeywell MB-Secure allows Privilege Abuse. This issue affects MB-Secure: from V11.04 before V12.53 and MB-Secure PRO from V01.06 before V03.09.Honeywell also recommends updating to the most rhttps://patchthecve.com/cve/CVE-2024-46453.htmlhttps://patchthecve.com/cve/CVE-2024-46453.htmlWed, 17 Jun 2026 07:55:23 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the component /test/ of iq3xcite v2.31 to v3.05 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.https://patchthecve.com/cve/CVE-2024-2422.htmlhttps://patchthecve.com/cve/CVE-2024-2422.htmlWed, 17 Jun 2026 07:24:30 +0000HIGH 8.8: LenelS2 NetBox access control and event monitoring system was discovered to contain an authenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands.https://patchthecve.com/cve/CVE-2024-2421.htmlhttps://patchthecve.com/cve/CVE-2024-2421.htmlWed, 17 Jun 2026 07:24:30 +0000CRITICAL 9.8: LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and including 5.6.1, which allows an attacker to execute malicious commands with elevated permissions.https://patchthecve.com/cve/CVE-2024-2420.htmlhttps://patchthecve.com/cve/CVE-2024-2420.htmlWed, 17 Jun 2026 07:24:30 +0000CRITICAL 9.8: LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and including 5.6.1 which allows an attacker to bypass authentication requirements.https://patchthecve.com/cve/CVE-2023-51605.htmlhttps://patchthecve.com/cve/CVE-2023-51605.htmlWed, 17 Jun 2026 06:41:18 +0000MEDIUM 6.5: Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2023-51604.htmlhttps://patchthecve.com/cve/CVE-2023-51604.htmlWed, 17 Jun 2026 06:41:18 +0000MEDIUM 6.5: Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2023-51603.htmlhttps://patchthecve.com/cve/CVE-2023-51603.htmlWed, 17 Jun 2026 06:41:18 +0000HIGH 8.8: Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability https://patchthecve.com/cve/CVE-2023-51602.htmlhttps://patchthecve.com/cve/CVE-2023-51602.htmlWed, 17 Jun 2026 06:41:18 +0000MEDIUM 6.5: Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2023-51601.htmlhttps://patchthecve.com/cve/CVE-2023-51601.htmlWed, 17 Jun 2026 06:41:18 +0000MEDIUM 6.5: Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2023-51600.htmlhttps://patchthecve.com/cve/CVE-2023-51600.htmlWed, 17 Jun 2026 06:41:17 +0000MEDIUM 6.5: Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerabilihttps://patchthecve.com/cve/CVE-2023-51599.htmlhttps://patchthecve.com/cve/CVE-2023-51599.htmlWed, 17 Jun 2026 06:41:17 +0000HIGH 8.8: Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Honeywell Saia PG5 Controls Suite. User interaction is required to exploit this vulnerability in that the targe