CVE-2026-64896

MediumCVSS 5.2

Published: 27/08/2026(UTC)Updated: 27/08/2026(UTC)Translated: 27/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

4th percentile - higher than 4% of all known CVEs

Summary

The debug and test interface in Johnson Controls T2000 has improper access control, allowing access to functionality not properly constrained by ACLs. This affects T2000 versions before 31.6.

Risk Assessment

An attacker may gain unauthorized access to debug and test functions, potentially compromising system confidentiality or integrity.

Recommendation

Update T2000 to version 31.6 or later to remediate the vulnerability.

Original NVD description (English source)

Debug and Test Interface With Improper Access Control vulnerability in Johnson Controls T2000 allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects T2000: before 31.6.