VulnerabilityHoneywell IQ4 BACnet Flaw Allows Unauthenticated Denial of Service and HVAC Override
Honeywell and CISA issue advisory for IQ4 building automation controllers, patching a critical BACnet/IP stack buffer overflow (CVE-2026-73850).
Topic
3 articles
CyberSecureToday covers Smart Buildings across 3 articles published between 21 Sep 2026 and 11 Oct 2026.
The coverage includes 3 vulnerability advisories. 3 advisories are rated critical or high severity.
Stories on Smart Buildings most often intersect with Building Automation, Siemens and SCADA, with Industrial, OT & IoT the most affected sector. The most recent story, “Honeywell IQ4 BACnet Flaw Allows Unauthenticated Denial of Service and HVAC Override”, was published 11 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
VulnerabilityHoneywell and CISA issue advisory for IQ4 building automation controllers, patching a critical BACnet/IP stack buffer overflow (CVE-2026-73850).
OT / SCADACISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.
OT / SCADASiemens issues advisory SSA-330084 for Desigo CC building management systems where improper input validation in graphics files allows arbitrary script execution.