CISA Warns: Critical Bug in Honeywell Cameras

Multiple Honeywell CCTV camera models are susceptible to a critical security flaw, CISA has disclosed. The vulnerability, rated 9.8 out of 10 and identified as CVE-2026-1670, allows unauthorized access to camera feeds and can lead to account takeovers.

An unauthenticated attacker could exploit this flaw to change recovery email addresses, further compromising the network. CISA is urging owners of affected Honeywell CCTV cameras to patch their devices immediately to mitigate the risk of exploitation.

While the vulnerability has not yet been added to CISA's catalog of known exploited vulnerabilities, threat actors often target systems after a flaw is revealed. Given that Honeywell serves industrial operators and critical infrastructure providers, exploitation is a significant concern.

In addition to patching, users are advised to minimize network exposure for control system devices, implement firewalls, and use secure VPNs for remote access.