PT-2026-66793 · Johnson Controls · Xaap Application

CVE-2026-34490 · Publicado 2026-07-31 · Atualizado 2026-07-31

Mitre

CVSS v4.0

4.8

Média

Vetor base

AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data.

This issue affects XAAP Application: before 1.53.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2026-34490

Produtos afetados

Xaap Application

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-34490 · Nota de Segurança
• https://johnsoncontrols.com/trust-center/cybersecurity/security-advisories · Nota