Cleartext Storage Vulnerability in Johnson Controls Simplex Incident Manager and Autocall Fire Administrator

CVE-2026-27875

What is CVE-2026-27875?

An issue has been identified in Johnson Controls' Simplex Incident Manager and Autocall Fire Administrator, where sensitive data may be stored in cleartext form in memory. This flaw could potentially allow attackers to retrieve embedded sensitive data, posing risks to information integrity and confidentiality. Users are advised to apply updates to the affected products to mitigate potential exposure. For further information, visit the Johnson Controls security advisory page.

References