CVE Catalog
CVE-2026-34492
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.27%
19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in Johnson Controls Airwall before 4.1 allows external control of file name or path, enabling file manipulation.
Risk Assessment
An attacker can manipulate files on the system, potentially leading to unauthorized changes or data corruption.
Recommendation
Update Airwall to version 4.1 or later to eliminate the vulnerability.
Other vulnerabilities in Johnson Controls Airwall
Original NVD description (English source)
External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

