← Database

CVE-2026-34490

MEDIUM CVSS: 5.5 Published: 2026-07-31 Modified: 2026-08-10

Description

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.

Affected Platforms

Johnsoncontrols Xaap

Weakness Type

CWE-312

References