SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742
SEC Consult disclosed local privilege escalation CVE-2026-13742 in Honeywell IQ MultiAccess, fixed in V27/V28 SP1.
SEC Consult Vulnerability Lab disclosed a local privilege escalation in the Honeywell IQ MultiAccess Update Service, tracked as CVE-2026-13742. Affected versions are IQ V27 and IQ V28; fixed versions are IQ V27 SP1 and IQ V28 SP1. The advisory rates impact as high. The posting does not report active exploitation.
- Local privilege escalation in the IQ MultiAccess Update Service.
- Vulnerable releases are IQ V27 and IQ V28.
- Fixes are IQ V27 SP1 and IQ V28 SP1.
- Tracked as CVE-2026-13742; impact rated high.
- No in-the-wild exploitation is reported.
- CVEs
- CVE-2026-13742
- Vendors
- Honeywell
- Organizations
- SEC Consult Vulnerability Lab
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-13742 | Honeywell IQ MultiAccess, all versions prior to and including version 28, contain an improper digital signature verification vulnerability | 5.9 | <1% |
From the original article
Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Sep 26 SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Local Privilege Escalation product: Honeywell IQ MultiAccess Update Service vulnerable version: IQ V27 & IQ V28 fixed version: IQ V27 SP1 & IQ V28 SP1 CVE number: CVE-2026-13742 impact: high homepage:...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.