SEC Consult Vulnerability Lab

Search everything

Mentions · 7d1
Mentions · 30d1
All mentions2
First seenSep 27, 2026
Last mentioned3d ago

Timeline

2 articles · newest first

VertiGIS WebOrderSystem through 7.0.8.6 has multiple XSS flaws

SEC Consult lists CVE-2026-4950, CVE-2026-4951 and CVE-2026-4952; the fixed version is unknown.

Full DisclosureOct 27, 07:29 UTC · 3d agoVulnerabilityCVE-2026-4950 CVE-2026-4951 CVE-2026-49521

SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742

SEC Consult disclosed local privilege escalation CVE-2026-13742 in Honeywell IQ MultiAccess, fixed in V27/V28 SP1.

Full DisclosureSep 27, 04:16 UTC · Sep 27, 2026VulnerabilityCVE-2026-137422 · 1 read

Related CVEs

by mentions

CVE-2026-13742<1%5.9
Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability
published Jun 29, 2026
CVE-2026-49515.1
Reflected XSS in VertiGIS WebOrderSystem KundenManager
published 7d agoVertiGIS WebOrderSystem (CustomerAdministration / KundenManager)
CVE-2026-49525.1
Stored XSS in VertiGIS WebOrderSystem OrderAdministration
published 7d agoVertiGIS WebOrderSystem
CVE-2026-49504.8
XSS in VertiGIS WebOrderSystem CustomerAdministration portal
published 7d agoVertiGIS WebOrderSystem

Appears with

IQ V28product · 1
IQ V27product · 1
AuftragsManagerproduct · 1
WebOrderSystemproduct · 1
VertiGISvendor · 1
Honeywell IQ MultiAccess Update Serviceproduct · 1
Honeywellvendor · 1
KundenManagerproduct · 1

Entities are extracted by the model from each article. First seen Sep 27, 2026, last mentioned 3d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.