Johnson Controls vulnerabilities

CVEs per yearBy the year they were published

1. 20181
2. 20192
3. 20207
4. 202112
5. 202212
6. 20238
7. 202416
8. 202510
9. 202643

Newest CVEs

• CVE-2026-106019

  Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials. This…

  Johnson Controls · C-CURE 9000, Victor

  High8.8
• CVE-2026-64894

  Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software…

  Johnson Controls · EasyIO Neo IOManager and Tools Installer

  High7.3
• CVE-2026-106022

  Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded…

  Johnson Controls · EasyIO Neo IOManager and Tools Installer

  High8.6
• CVE-2026-106020

  Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order…

  Johnson Controls · EasyIO Neo IO Manager and Tools Installer

  High8.6
• CVE-2026-71450

  Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass.…

  Johnson Controls · EasyIO Neo EC and CW Edge Controller

  High8.7
• CVE-2026-71456

  Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech…

  Johnson Controls · Kantech Entrapass

  High8.5
• CVE-2026-71455

  Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue…

  Johnson Controls · Kantech Entrapass

  Medium5.3
• CVE-2026-34499

  Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS:…

  Johnson Controls · ADVMS

  High8.5
• CVE-2026-34498

  L4L

  Johnson Controls · Illustra Standard - L4L China

  Medium5.1
• CVE-2026-27873

  - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52.

  Johnson Controls · EasyIO FG

  Medium5.6