johnson-controls

Top products

The 15 most recently published vulnerabilities affecting johnson-controls.

• CVE-2026-34497FMS Employee Vulnerable to HTML Injection2.4Jul 31, 2026
• CVE-2026-34495FMS Employee vulnerable to XSS2.4Jul 31, 2026
• CVE-2026-21662FMS Employee Allows Upload of Unrestricted Files2.4Jul 31, 2026
• CVE-2026-34490XAAP Android Data Stored in Unencrypted Database3.3Jul 31, 2026
• CVE-2026-34496victor Web - Priviledge Escalation8.8Jul 23, 2026
• CVE-2026-21653CCure and Victor Application Server - Server Side Request Forgery8.8Jul 23, 2026
• CVE-2026-21655C-CURE 9000 and Victor application server - Deserialization of Untrusted Data8.8Jul 23, 2026
• CVE-2026-21660Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware9.8Feb 27, 2026
• CVE-2026-21659Johnson Controls -Frick Quantum HD-Unauthenticated Remote Code Execution and Information Disclosure due to Local File Inclusion9.8Feb 27, 2026
• CVE-2026-21658Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution9.8Feb 27, 2026
• CVE-2026-21657Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution9.8Feb 27, 2026
• CVE-2026-21656Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution9.8Feb 27, 2026
• CVE-2026-21654Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution9.8Feb 27, 2026
• CVE-2025-26385Metasys product command injection vulnerability could allow remote SQL execution10.0Jan 30, 2026
• CVE-2025-26386Stack-based Buffer Overflow in Johnson Controls iSTAR Configuration Utility (ICU) tool7.1Jan 28, 2026