This vulnerability (CVE-2026-4272) in Honeywell handheld barcode scanners arises from missing authentication controls on critical functions accessible via Bluetooth. It allows an unauthenticated remote attacker within Bluetooth range of the scanner's base station to execute arbitrary system commands on the connected host. The affected devices are specific Honeywell scanner models and firmware versions prior to certain build numbers. The CVSS 3.1 score is 8.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality and integrity. Honeywell advises upgrading to fixed versions, though no explicit patch details or advisories are provided in the input data.

An attacker within Bluetooth range can remotely execute system commands on the host connected to the vulnerable scanner's base station without authentication. This can lead to unauthorized control over the host system, compromising confidentiality and integrity. Availability impact is not indicated. The vulnerability is rated high severity with a CVSS score of 8.1.

Honeywell strongly recommends upgrading to the latest firmware versions identified to resolve this vulnerability. Since no explicit patch or remediation level is provided in the available data, users should consult Honeywell's official advisories or support channels for the latest updates and apply them promptly. Until patched, restricting Bluetooth access to trusted devices and minimizing Bluetooth exposure may reduce risk.