password recovery

  1. Critical Unauthenticated API Flaw in Honeywell CCTV (CVE-2026-1670)

    A high-severity vulnerability disclosed by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) on February 17, 2026 exposes an unauthenticated API on multiple Honeywell CCTV product families that can be abused to change the “forgot password” recovery email address — an action that...