Johnson Controls
Vulnerability activity for Johnson Controls: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 7
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 9
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 9
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.3HighNov 6, 2026Johnson Controls EasyIO Neo IOManager and Tools InstallerCVE-2026-64894Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.
- 8.6HighNov 6, 2026Johnson Controls EasyIO Neo IOManager and Tools Installer Information disclosureCVE-2026-106022Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retrieve Embedded Sensitive Data. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.
- 8.6HighNov 6, 2026Johnson Controls EasyIO Neo IO Manager and Tools InstallerCVE-2026-106020Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows Search Order Hijacking. This issue affects EasyIO Neo IO Manager and Tools Installer: 1.1.0.0.
- 8.8HighNov 6, 2026Johnson Controls C-CURE 9000, Victor Information disclosureCVE-2026-106019Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System Credentials. This issue affects C-CURE 9000, Victor: 3.20.
- 8.7HighNov 2, 2026Johnson Controls EasyIO Neo EC and CW Edge Controller Auth bypass / access controlCVE-2026-71450Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass. This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 through EC 3.3b63 and from CW 3.3b24 through CW 3.3b25.
- 8.5HighOct 26, 2026Johnson Controls Kantech Entrapass Crypto / certificateCVE-2026-71456Use of hard-coded cryptographic key vulnerability in Johnson Controls Kantech Entrapass allows Padding Oracle Crypto Attack. This issue affects Kantech Entrapass: before 9.20.
- 5.3MediumOct 26, 2026Johnson Controls Kantech Entrapass Information disclosureCVE-2026-71455Cleartext storage of sensitive information in memory vulnerability in Johnson Controls Kantech Entrapass allows Retrieve Embedded Sensitive Data. This issue affects Kantech Entrapass: before 9.20.
- 8.5HighOct 7, 2026Johnson Controls ADVMS Crypto / certificateCVE-2026-34499Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects ADVMS: before 3.10.
- 5.1MediumOct 6, 2026Johnson Controls Illustra Standard - L4L China Code / command injectionCVE-2026-34498Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394.
Top products
- Kantech Entrapass2 CVEs in the last year
- EasyIO Neo IOManager and Tools Installer2 CVEs in the last year
- Illustra Standard - L4L China1 CVE in the last year
- EasyIO Neo IO Manager and Tools Installer1 CVE in the last year
- EasyIO Neo EC and CW Edge Controller1 CVE in the last year
- C-CURE 9000, Victor1 CVE in the last year
- ADVMS1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.