PT-2026-22325 · Johnson Controls · Frick Controls Quantum Hd

Noam Moshe · CVE-2026-21659 · Publicado 2026-02-27 · Atualizado 2026-03-04

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Johnson Controls Frick Controls Quantum HD versions prior to 10.22

Description An unauthenticated attacker can execute arbitrary code on affected devices, potentially leading to full system compromise. This is due to a Local File Inclusion (LFI) issue.

Recommendations Update to a version later than 10.22.

Correção

RCE

Path traversal

Relative Path Traversal

Enumeração de Fraquezas

CWE-22

CWE-23

Identificadores relacionados

CVE-2026-21659

Produtos afetados

Frick Controls Quantum Hd

Referências · 9

• https://johnsoncontrols.com/trust-center/cybersecurity/security-advisories · Aviso do Fabricante
• https://twitter.com/TheHackerWire/status/2028546041990234310 · Publicação no Twitter
• https://twitter.com/cracbot/status/2029150015680376959 · Publicação no Twitter
• https://cisa.gov/news-events/ics-advisories/icsa-26-057-01 · Nota
• https://t.me/cveNotify/153453 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2027380165668409462 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-21659 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-21659 · Nota de Segurança
• https://t.me/CVEtracker/45970 · Publicação no Telegram