A critical 10.0 CVSS flaw (CVE-2026-3611) in Honeywell IQ4x BMS controllers leaves web HMIs exposed without authentication. Secure your systems immediately.
building management system
A critical flaw in ABB ASPECT BMS (CVE-2025-53187) allows unauthenticated remote attackers to achieve RCE with a CVSS 9.8 score. Admins must patch or disconnect systems.