IQ4E vulnerabilities

1 known vulnerability in IQ4E from Honeywell. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  IQ4E: Missing Authentication for Critical Functionality

  CVE-2026-3611Mar 12, 2026HoneywellEPSS 6.3%

  The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration. With no user module configured, security is disabled by design and the system operates under a System Guest (level 10