SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

As cited

Copy frozen at 2026-09-27 14:21 UTC (site build).

vulnerabilities

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

Honeywell IQ MultiAccess Update Service versions 27 and 28 contain a local privilege escalation vulnerability tracked as CVE-2026-13742. The vulnerability carries a high impact rating and has been fixed in service pack 1 releases for both affected versions.

Why it matters: Organizations running Honeywell IQ V27 or V28 must patch to SP1 immediately to prevent local attackers from escalating privileges on systems with this update service installed.

Source published

2026-09-27 04:16 UTC

First seen by Cybersecurity Tracker

2026-09-27 13:15 UTC