The vulnerability identified as CVE-2026-5434 (CWE-538) affects Honeywell's Control Network Module (CNM) versions 100.1, 101.1, 110.1, and 110.2. It involves the insertion of sensitive information into directories that are externally accessible, which could be probed by an attacker to access protected data. The CVSS v3.1 score is 5.9, indicating medium severity, with network attack vector, high attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. Honeywell advises updating to version 200.1 to mitigate this vulnerability. No official patch or remediation level is explicitly stated beyond this recommendation, and no known exploits have been reported.

An attacker could potentially access sensitive information that was improperly stored in an externally accessible directory, leading to unauthorized disclosure of protected data. The vulnerability does not affect system integrity or availability. The medium CVSS score reflects the moderate risk due to the high attack complexity and lack of required privileges or user interaction.

Honeywell recommends updating the Control Network Module (CNM) to the most recent version 200.1. This update is the primary remediation step to address the vulnerability. Since no official patch or temporary fix details are provided, applying the vendor-recommended update is the advised action. There are no indications that the vulnerability is already mitigated or that no action is required.