CVE-2026-34491 | Johnson Controls Metasys prior 14.1.5/15.0.1 cross site scripting

August 24, 2026 Yanac

A vulnerability classified as problematic was found in Johnson Controls Metasys. This issue affects some unknown processing. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-34491. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More