CVE-2026-27871

LowCVSS 2.9

Published: 14/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

CWE-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows cryptanalytic attack.

Risk Assessment

Risk of encryption being broken and confidentiality of data transmitted by the device being compromised.

Recommendation

Upgrade TL280 to version 5.63 or later and implement stronger cryptographic algorithms.

Original NVD description (English source)

Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack. This issue affects TL280: before 5.63.