PT-2026-98216 · Honeywell · Pd45 Industrial Printer

CVE-2026-13249

·

Published

2026-09-24

·

Updated

2026-09-26

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Honeywell PD45 Industrial Printer versions F10.19.010040 through F10.22.030744
Description An unauthenticated Remote Code Execution (RCE) issue exists in the HTTPS web management interface. This is caused by an arbitrary file upload flaw that allows an attacker to upload controlled files without authentication, potentially leading to the execution of malicious files and commands.
Recommendations Update Honeywell PD45 Industrial Printer to firmware version F10.22.030745.

Fix

RCE

OS Command Injection

Unrestricted File Upload

Missing Authentication

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-78CWE-434CWE-306

Related Identifiers

CVE-2026-13249

Affected Products

Pd45 Industrial Printer