CVE-2026-34492

HighCVSS 7.0

Published: 14/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Vulnerability in Johnson Controls Airwall before 4.1 allows external control of file name or path, enabling file manipulation.

An attacker can manipulate files on the system, potentially leading to unauthorized changes or data corruption.

Update Airwall to version 4.1 or later to eliminate the vulnerability.

Original NVD description (English source)

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.