Johnson Controls Airwall external filename control allows file manipulation before version 4.1

Last refreshed2026-09-30

Status: NEW | Advisory ID: CVE-2026-34492

Key Details

CVE	CVE-2026-34492
CVSS Score / Version	7.0 (High) / CVSS v4.0
Updated	2026-09-03
Classified as	CWE-73 (External Control of File Name or Path)

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation.

This issue affects Airwall: before 4.1. (NVD)

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-34492
CVE	https://www.cve.org/CVERecord?id=CVE-2026-34492

Source

Reference

NVD

CVE