Not scored
CVE-2026-1670
Honeywell CCTV Products Missing Authentication for Critical Function
HoneywellI-HIB2PI-UL 2MP IP
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.8%probability of exploitation in the next 30 days
Higher than 57% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.
Coverage 2 articles · 1 outlet
See the full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Thu 19 Feb · 13:01 UTC | Security Affairs | CISA alerts to critical auth bypass CVE-2026-1670 in Honeywell CCTVs |
| Mon 23 Feb · 00:37 UTC | Security Affairs | CISA flags RoundCube and GitLab flaws as Gemini AI attacks rise |
- CISA flags RoundCube and GitLab flaws as Gemini AI attacks riseSecurity Affairs
- CISA alerts to critical auth bypass CVE-2026-1670 in Honeywell CCTVsSecurity Affairs · first in our coverage