Vulnerabilities in Johnson Controls
111 resultsCVE-2026-34490MEDIUMXAAP Android Data Stored in Unencrypted DatabaseEPSS 0.1%CVE-2026-71456HIGHUse of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack.
This issue affEPSS 0.1%CVE-2026-34499HIGHUse of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable.
This issuEPSS 0.1%CVE-2026-27873MEDIUM- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying.
This issue affects EasyIO FG: beforeEPSS 0.1%CVE-2026-27872MEDIUMEasyIO FGEPSS 0.1%CVE-2026-27875MEDIUMSimplex Incident Manager Clear TestEPSS 0.1%CVE-2026-71455MEDIUMCleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive EPSS 0.1%CVE-2026-64894HIGHInclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows MEPSS —CVE-2026-106019HIGHInsertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System EPSS —CVE-2026-106020HIGHImproper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows SEPSS —CVE-2026-106022HIGHCleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows RetriEPSS —