SMB NDAA MVO-3 vulnerabilities

1 known vulnerability in SMB NDAA MVO-3 from Honeywell. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  I-HIB2PI-UL 2MP IP: Missing Authentication for Critical Functionality

  CVE-2026-1670Feb 17, 2026Honeywell

  The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.