CVE-2026-21662 | Johnson Controls FM Systems Employee up to 2025.3.0 unrestricted upload

July 31, 2026 Yanac

A vulnerability classified as critical was found in Johnson Controls FM Systems Employee up to 2025.3.0. This affects an unknown part. Such manipulation leads to unrestricted upload.

This vulnerability is uniquely identified as CVE-2026-21662. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More