Threat database

CVE-2026-34499 is a high-severity vulnerability in Johnson Controls ADVMS before version 3.10. It involves the use of a hard-coded cryptographic key, which allows an attacker with limited privileges to read sensitive constants within the executable. This vulnerability has a CVSS 4.0 score of 8.5, indicating significant impact on confidentiality, integrity, and availability. No official patch or remediation information is provided in the available data.

CVE-2026-34498 is an improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows that allows OS command injection. It affects versions prior to 6.0.0.66394. The vulnerability has a medium severity with a CVSS 4.0 score of 5.1. No patch or official fix information is provided in the available data.

- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52.

CVE-2026-64893 is a vulnerability in Johnson Controls EasyIO NEO that allows cleartext transmission of sensitive information. This flaw affects versions before 3.3b25 and could enable a man-in-the-middle attack. The vulnerability has a high severity rating with a CVSS score of 7.3. No official patch or remediation details are provided in the available data.

CVE-2026-64892 is a medium severity vulnerability in Johnson Controls Easy IO Neo that allows exposure of sensitive information by collecting data from common resource locations. It affects versions before 3.3b63. The vulnerability requires high privileges and user interaction but has low complexity and no network impact on integrity or availability.

CVE-2026-34494 is a high-severity vulnerability in the On-Chip Debug Interface of Johnson Controls Neo Series MVP2 devices before version 3.3b63. It allows unauthorized collection of data from common resource locations. The vulnerability has a CVSS 4.0 base score of 7.2, indicating a significant security risk. No official patch or remediation details are provided in the available data. The vulnerability requires high attack complexity and user interaction but does not require privileges or authentication.

CVE-2026-34493 is a high-severity vulnerability in the On-Chip Debug Interface of Johnson Controls EasyIO FS32 devices before version 3.3b63. It allows unauthorized collection of data from common resource locations. The vulnerability has a CVSS 4.0 base score of 7.2, indicating significant impact but requiring high attack complexity and user interaction. A patch is available to address this issue. The product is a cloud service, so the vendor manages remediation server-side.

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63.

CVE-2026-71448 is an insecure default initialization of resource vulnerability in Johnson Controls EasyIO FS32 that allows authentication abuse. It affects versions before 3.0b63. The vulnerability has a medium severity with a CVSS 4.0 score of 5.6. A patch is available for this issue. The product is a cloud service, so the vendor manages remediation for the hosted service.

CVE-2026-71453 is a medium severity vulnerability in Johnson Controls EasyIO FS32 prior to version 3.0b63. It involves external control of file name or path, enabling a traversal attack. The vulnerability allows an attacker with high privileges to potentially manipulate file paths externally. A patch is available, and the product is a cloud service, so vendor-managed remediation is expected.

- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63.

An OS Command Injection vulnerability (CWE-78) exists in Johnson Controls EasyIO FS32 versions before 3.0b63. This flaw allows an attacker with high privileges to potentially execute arbitrary OS commands. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.6. A patch is available for this issue. The product is a cloud service, so remediation is typically managed by the vendor.

CVE-2026-27874 is a medium severity vulnerability in Johnson Controls EasyIO FS32 involving the use of hard-coded credentials. This flaw affects versions before 3.0b63 and allows exploitation of default or hard-coded credentials, potentially enabling unauthorized access. The vulnerability has a CVSS 4.0 score of 5.0, indicating a moderate risk. The product is a cloud service, and a patch is available to address this issue.

CVE-2026-27872 is an improper privilege management vulnerability in Johnson Controls Easy IO FG affecting versions before 2.0b52. The flaw allows privilege escalation through brute force attacks. The vulnerability has a medium severity with a CVSS 4.0 base score of 5.6.

CVE-2026-64896 is a medium-severity vulnerability in Johnson Controls T2000 affecting versions before 31.6. It involves a debug and test interface with improper access control, allowing unauthorized access to functionality that is not properly constrained by access control lists (ACLs). The vulnerability does not require privileges or user interaction to exploit but has limited impact on confidentiality and high impact on availability. No official patch or remediation guidance is currently available.

CVE-2026-34491 is a cross-site scripting (XSS) vulnerability in Johnson Controls Metasys versions 14 and 15. The flaw arises from improper neutralization of input during web page generation, allowing potential injection of malicious scripts. It affects Metasys 14 versions before 14.1.5 and Metasys 15 versions before 15.0.1. The vulnerability has a medium severity with a CVSS 4.0 score of 6.1. No known exploits are reported in the wild. This issue requires patching to mitigate the risk.

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.