PT-2026-107668 · Johnson Controls · Advms

CVE-2026-34499

Published

2026-10-07

Updated

2026-10-07

CVSS v4.0

8.5

High

Vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Use of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable.

This issue affects ADVMS: before 3.10.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-34499

Advms