CVE-2026-4272Disclosure

LOWCVSS 8.1 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x1000) before GK000432BAA, from D1 Base(Ingenic x1600) before HE000085BAA, from A1/B1 Base(IMX25) before BK000763BAA_BK000765BAA_CU000101BAA. This vulnerability could allow a remote attacker within Bluetooth range of the scanner's base station has the capability to remotely execute system commands on the host connected to the base station without authentication. This issue has been assigned CVE-2026-4272 https://nvd.nist.gov/vuln/detail/CVE-2026-4272 and rated with a severity of High. Honeywell strongly recommends that users upgrade to the latest version identified to resolve the vulnerability.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://https://nvd.nist.gov/vuln/detail/CVE-2026-4272

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

5 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 5 classified signals
Peaked 1d ago at 4 mentions (2026-04-05); latest day: 1
5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d

Signal classification1 categories

Disclosure

5100.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-05	4	Disclosure4
2026-04-29	1	Disclosure1

Full discourse5 posts

Haidar@haider_kabibo162d
Disclosure
Finally, after being ignored many times by vendors regarding bugs I reported, I have my first registered CVE https://nvd.nist.gov/vuln/detail/CVE-2026-4272 Thanks to Honeywell I will talk about it in more detail later this year in a research paper. It uses a very interesting and fun attack vector in big industry.
Post summary
The user references the registration of CVE-2026-4272 and plans to discuss it later in a research paper, but offers no further technical information.
2302382.5K
1.1K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds185d
Disclosure
CVE-2026-4272 Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-4272
Post summary
The post provides a brief disclosure of a missing authentication flaw in Honeywell handheld scanners, without any evidence of active exploitation, PoC, patch, or false positive claims.
0000064
4.0K followersView on X
Infoflowcloud@infoflowcloud185d
Disclosure
🚨*CVE* CVE-2026-4272 Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base… https://www.cve.org/CVERecord?id=CVE-2026-4272 ----- Traducción: CVE-2026-4272 Fal… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-4272, describing a missing authentication flaw in Honeywell handheld scanners that permits authentication abuse, but provides no PoC, exploit, active exploitation claim, or patch information.
0000051
63 followersView on X
CVE@CVEnew185d
Disclosure
CVE-2026-4272 Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base… https://www.cve.org/CVERecord?id=CVE-2026-4272
Post summary
The post announces CVE‑2026‑4272—a missing authentication flaw in Honeywell Handheld Scanners that could enable authentication abuse, with no details on patches, PoCs, or exploit activity.
00000349
56.8K followersView on X
The Hacker Wire@TheHackerWire185d
Disclosure
🟠 CVE-2026-4272 - High Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Base(Ingenic x1000) before G... https://www.thehackerwire.com/vulnerability/CVE-2026-4272/ https://t.co/VjmdgTs0dg
Post summary
A new high‑severity vulnerability (CVE‑2026‑4272) is disclosed, detailing a missing authentication flaw in Honeywell handheld scanners; no PoC, exploitation data, or patch information is provided.
0000065
161 followersView on X

Explore more

Back to dashboard

What researchers are saying

CVE-2026-4272

Haidar[verified]@haider_kabiboDisclosure

The user references the registration of CVE-2026-4272 and plans to discuss it later in a research paper, but offers no further technical information.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post provides a brief disclosure of a missing authentication flaw in Honeywell handheld scanners, without any evidence of active exploitation, PoC, patch, or false positive claims.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-4272, describing a missing authentication flaw in Honeywell handheld scanners that permits authentication abuse, but provides no PoC, exploit, active exploitation claim, or patch information.

CVE@CVEnewDisclosure

The post announces CVE‑2026‑4272—a missing authentication flaw in Honeywell Handheld Scanners that could enable authentication abuse, with no details on patches, PoCs, or exploit activity.

The Hacker Wire@TheHackerWireDisclosure

A new high‑severity vulnerability (CVE‑2026‑4272) is disclosed, detailing a missing authentication flaw in Honeywell handheld scanners; no PoC, exploitation data, or patch information is provided.