CVE-2026-34498CWE-20

CVE-2026-34498

published October 6, 2026

CVSS
5.1
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection.

This issue affects Illustra Standard - L4L China: before 6.0.0.66394.

The record
Technical detail
CVSS
5.1 · NONE
CVSS v4.0
5.1 · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:L
EPSS
0.00687 · 52.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-10-06T18:17Z
References (1)
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories · [email protected]
EPSS history
Timeline
  • 08 OCT 03:29Z
    EPSS moved — → 1%
    epss
  • 06 OCT 13:52Z
    L4L
    cvelistv5