Known Vulnerabilities for Johnson Controls by Vendor
Listed below are 10 of the newest known vulnerabilities associated with "Johnson Controls" by "Vendor".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-64887 json | Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affe... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-34497 json | Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Em... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-34496 json | Cwe-269 vulnerability in Johnson Controls victor Web on Windows allows capec-233. This issue affects victor Web: before 7.1. | Not Provided | 2026-07-23 | 2026-07-24 |
| CVE-2026-34495 json | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Sys... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-34492 json | External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affec... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-34490 json | Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker o... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-27875 json | Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fi... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-27871 json | Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack.... | Not Provided | 2026-08-14 | 2026-08-14 |
| CVE-2026-21662 json | Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious ... | Not Provided | 2026-07-31 | 2026-07-31 |
| CVE-2026-21655 json | Deserialization of untrusted data vulnerability in Johnson Control victor on Windows, Johnson Controls CCure 9000, and Johnso... | Not Provided | 2026-07-23 | 2026-08-06 |