CVE Catalog
CVE-2026-64887
HighCVSS 7.0Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
Vulnerability in Johnson Controls Airwall before 4.1 involves the use of a hard-coded cryptographic key, allowing a cryptanalytic attack.
Risk Assessment
An attacker could break encryption and gain access to sensitive data or take control of the system.
Recommendation
Update Airwall to version 4.1 or later, which includes the fix.
Original NVD description (English source)
Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack. This issue affects Airwall: before 4.1.