← Back to CVE search

CVE-2026-21662

Johnson Controls FM Systems Employee

Description

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.

CVSS 9.8EPSS 0.504%Risk 1.02
View source
Published
2026-07-31 18:17:13
Affected versions
<2025.3.1
Type
Web application
Last modified
2026-08-10 19:55:41
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H