Johnson Controls

Products

ProductCVEsExploitedLatest
EasyIO FS327–Oct 1, 2026
exacqVision6–Aug 1, 2024
Frick Controls Quantum HD6–Feb 27, 2026
Metasys ADS/ADX/OAS server6–Jul 22, 2022
American Dynamics Illustra Essentials Gen 44–Jul 2, 2024
iSTAR Configuration Utility (ICU)4–Jan 28, 2026
Metasys4–Jan 30, 2026
IQ Panels2, 2+, IQHub, IQPanel 4, PowerG3–Dec 22, 2025
exacqVision Web Service3–Oct 11, 2021
FM Systems Employee3–Jul 31, 2026
OpenBlue Enterprise Manager Data Collector2–May 18, 2023
iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G22–Dec 24, 2025
Software House C•CURE 90002–Jul 10, 2024
iSTAR Ultra, iSTAR Ultra SE2–Dec 24, 2025
Airwall2–Aug 14, 2026
Kantech Entrapass2–Oct 26, 2026
System Configuration Tool (SCT)2–Feb 9, 2023
CCure 90002–Jul 23, 2026
Facility Explorer F4-SNC1–Dec 7, 2023
Facility Explorer SNC Series Supervisory Controllers (F4-SNC)1–Jul 1, 2021
Illustra Standard - L4L China1–Oct 6, 2026
IQ Wifi 61–Jul 25, 2023
IQPanel2, IQHub,IQPanel2+,IQPanel 4,PowerG1–Dec 22, 2025
iSTAR Pro, Edge and eX1–Jun 6, 2024
iSTAR Ultra1–Aug 31, 2022
iSTAR Ultra and Ultra LT1–Jun 6, 2024
iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE1–Dec 17, 2025
Kantech EntraPass Security Management Software Corporate Edition versions 8.22 and prior1–May 26, 2020
Kantech EntraPass Security Management Software Global Edition versions 8.22 and prior1–May 26, 2020
Kantech EntraPass Security Management Software Special Edition versions 8.22 and prior1–May 26, 2020
Kantech KT1 Door Controller, Rev011–Jul 4, 2024
Kantech KT2 Door Controller, Rev011–Jul 4, 2024
Kantech KT400 Door Controller, Rev011–Jul 4, 2024
KT-11–Sep 15, 2021
Metasys 141–Aug 24, 2026
Metasys 151–Aug 24, 2026
Metasys ADS/ADX/OAS1–Jan 13, 2023
Metasys Application and Data Server (ADS, ADS-Lite)1–Mar 10, 2020
Metasys Extended Application and Data Server (ADX)1–Mar 10, 2020
Metasys LonWorks Control Server (LCS)1–Mar 10, 2020
Metasys NAE55/SNE/SNC1–Dec 7, 2023
Metasys NAE85 and NIE851–Mar 10, 2020
Metasys Network Automation Engine (NAE55 only)1–Mar 10, 2020
Metasys Network Integration Engine (NIE55/NIE59)1–Mar 10, 2020
Metasys Open Application Server (OAS)1–Mar 10, 2020
Metasys Open Data Server (ODS)1–Mar 10, 2020
Metasys Reporting Engine (MRE) Web Services versions 2.0 and 2.11–Feb 19, 2021
Metasys Smoke Control Network Automation Engine (NAE55, UL 864 UUKL/ORD-C100-13 UUKLC 10th Edition Listed)1–Mar 10, 2020
Metasys System Configuration Tool (SCT)1–Mar 10, 2020
Neo Series MVP21–Oct 1, 2026
OpenBlue Workplace (formerly FM Systems)1–Dec 17, 2025
Quantum HD Unity AcuAir1–Nov 10, 2023
Quantum HD Unity Compressor1–Nov 10, 2023
Quantum HD Unity Condenser/Vessel1–Nov 10, 2023
Quantum HD Unity Engine Room1–Nov 10, 2023
Quantum HD Unity Evaporator1–Nov 10, 2023
Quantum HD Unity Interface1–Nov 10, 2023
Simplex Incident Manager / Autocall Fire Administrator1–Aug 21, 2026
Software House C•CURE 9000 Installer1–Jul 16, 2024
Software House C•CURE 9000 v2.701–May 21, 2020
T20001–Aug 27, 2026
TL2801–Aug 14, 2026
TYCO Illustra Flex4 DualSensor Cameras1–Jul 11, 2024
TYCO Illustra Flex4 Fixed & PTZ cameras1–Jul 11, 2024
TYCO Illustra Pro4 Fixed cameras1–Jul 11, 2024
TYCO Illustra Pro4 MultiSensor Cameras1–Jul 11, 2024
TYCO Illustra Pro4 PTZ cameras1–Jul 11, 2024
Victor Application Server1–Jul 23, 2026
victor Web1–Jul 23, 2026
victor Web Client version 5.4.1 and prior1–Oct 8, 2020
victor Web Client version 5.6 and prior1–Nov 19, 2020
VideoEdge1–Jan 14, 2022
AC20001–May 6, 2026
XAAP Application1–Jul 31, 2026
ADVMS1–Oct 7, 2026
American Dynamics victor Video Management System v5.21–May 21, 2020
C-CURE 90001–Jul 1, 2021
CCure 9000 and victor application server1–Jul 23, 2026
C•CURE Web Client version 2.90 and prior (Note - This does not affect the new web-based C•CURE 9000 client that was introduced in C•CURE 9000 v2.90)1–Nov 19, 2020
CEM Systems AC20001–Aug 30, 2021
CEVAS1–Oct 28, 2022
Easy IO FG1–Oct 1, 2026
Easy IO Neo1–Oct 1, 2026
EasyIO FG1–Oct 1, 2026
EasyIO NEO1–Oct 1, 2026
EasyIO Neo EC and CW Edge Controller1–Nov 2, 2026
Entrapass1–Dec 6, 2021
exacqVision Enterprise Manager1–Jun 24, 2021
exacqVision Enterprise Manager versions 20.03.3.0 and prior1–Jun 26, 2020
exacqVision Web Service version 20.12.2.0 and prior1–Mar 18, 2021
exacqVision Web Service versions 20.03.2.0 and prior1–Jun 26, 2020

Exploited and recent CVEs

  • CVE-2026-71450 High 8.7 Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass. This issue affects EasyIO Neo EC and CW E 0.3%
  • CVE-2026-71456 High 8.5 Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20. <0.1%
  • CVE-2026-71455 Medium 5.3 Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20. <0.1%
  • CVE-2026-34499 High 8.5 Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10. <0.1%
  • CVE-2026-34498 Medium 5.1 L4L 0.7%
  • CVE-2026-27873 Medium 5.6 - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. <0.1%
  • CVE-2026-64893 High 7.3 - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25. 0.1%
  • CVE-2026-64892 Medium 6.3 - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63. 0.2%
  • CVE-2026-34494 High 7.2 - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63. 0.2%
  • CVE-2026-34493 High 7.2 - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63. 0.2%
  • CVE-2026-71449 Critical 9.3 : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63. 0.3%
  • CVE-2026-71448 Medium 5.6 : Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63. 0.1%
  • CVE-2026-71453 Medium 5.6 - External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63. 0.1%
  • CVE-2026-71452 High 7.2 - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. 0.7%
  • CVE-2026-71451 Medium 5.6 - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63. 0.4%
  • CVE-2026-27874 Medium 5.0 : Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63. 0.1%
  • CVE-2026-27872 Medium 5.6 EasyIO FG <0.1%
  • CVE-2026-64896 Medium 5.2 T2000 open debug port 0.2%
  • CVE-2026-34491 Medium 6.1 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This iss 0.4%
  • CVE-2026-34491 Medium 6.1 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allows Cross Site Scripting. This iss 0.4%
  • CVE-2026-27875 Medium 6.9 Simplex Incident Manager Clear Test <0.1%
  • CVE-2026-34492 High 7.0 Airwall - Arbitrary file read 0.4%
  • CVE-2026-64887 High 7.0 Airwall - Hardcoded Secrets 0.2%
  • CVE-2026-27871 Low 2.9 TL280 0.3%
  • CVE-2026-34497 Medium 4.8 FMS Employee Vulnerable to HTML Injection 0.2%
  • CVE-2026-34495 Medium 4.8 FMS Employee vulnerable to XSS 0.2%
  • CVE-2026-21662 Medium 4.8 FMS Employee Allows Upload of Unrestricted Files 0.5%
  • CVE-2026-34490 Medium 4.8 XAAP Android Data Stored in Unencrypted Database 0.1%
  • CVE-2026-34496 High 7.1 victor Web - Priviledge Escalation 0.3%
  • CVE-2026-21653 High 7.2 CCure and Victor Application Server - Server Side Request Forgery 0.4%