← Database

CVE-2026-21662

CRITICAL CVSS: 9.8 Published: 2026-07-31 Modified: 2026-08-10

Description

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.

Affected Platforms

Johnsoncontrols Fms Employee

Weakness Type

CWE-434

References