Johnson Controls Metasys

• CVE-2025-26385 Critical 9.5 Metasys product command injection vulnerability could allow remote SQL execution 1.5%
• CVE-2021-36205 High 8.1 Metasys session token 1.0%
• CVE-2021-36202 High 8.4 Metasys UI 0.8%
• CVE-2021-27657 High 8.8 Metasys Improper Privilege Management 1.2%