CVE-2026-4272 - Vulnerability Analysis

Overview

Honeywell Handheld Scanners before GK000432BAA, HE000085BAA, BK000763BAA_BK000765BAA_CU000101BAA contain a missing authentication for critical function vulnerability caused by lack of authentication on system command execution, letting remote attackers within Bluetooth range execute system commands without authentication.

Severity & Score

Impact

Remote attackers within Bluetooth range can execute system commands on the host, potentially leading to full system compromise.

Mitigation

Upgrade to the latest available version as recommended by Honeywell.

References

• https://https://nvd.nist.gov/vuln/detail/CVE-2026-4272

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner