CVE-2026-27871CWE-327

CVE-2026-27871

published August 15, 2026

CVSS

2.9

EPSS

Percentile

18.1

In the wild

Unconfirmed

What it is

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack.

This issue affects TL280: before 5.63.

The record

Technical detail

CVSS: 2.9 · NONE
CVSS v4.0: 2.9 · CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS: 0.00269 · 18.1th percentile
Weakness: CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published: 2026-08-15T00:16Z

References (1)

EPSS history

Timeline