CVE-2026-21662

Description

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.

References

• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories