Johnson Controls AC2000 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Johnson Controls AC2000: 1 record(s), with affected versions and fixes.
CVE-2026-21661
High · 8.4
CWE-427 May 6, 2026
AC2000 Uncontrolled Search Path Element
An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths.
This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3.