CVE-2026-64887

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.

Published: 8/14/2026Modified: 8/14/2026

Related Intelligence (1)

CRITICALPhishing

Johnson Controls Inc. Airwall

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-225-03.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to decrypt sensitive data, bypass authentication controls, gaining unauthorized access to read arbitrary files on the system, or gain unauthorized access to prot

CVE-2026-64887CVE-2026-34492
CISA Advisories

References (1)

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories