External Control of File Name Vulnerability in Johnson Controls Airwall
CVE-2026-34492

7HIGH

Key Information:

Vendor

Johnson Controls

Status
Airwall
Vendor
CVE Published:
14 August 2026

What is CVE-2026-34492?

The vulnerability in Johnson Controls Airwall allows an external entity to manipulate file names or paths, leading to unauthorized file manipulation. This issue affects versions prior to 4.1, potentially putting sensitive data at risk. Users are encouraged to update to the latest version to mitigate risks associated with this vulnerability. For detailed security advisories, please visit Johnson Controls' trust center.

Affected Version(s)

Airwall 0 < 4.1

References

https://www.johnsoncontrols.com/trust-center/cybersecurit...

CVSS V4

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.