Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CISA published an advisory on vulnerabilities in Johnson Controls C-CURE 9000 and Victor application server used for physical access control. Exploitation could lead to authentication bypass and system compromise.
CISA issued a critical advisory on vulnerabilities in the Johnson Controls XAAP Android application used for building management. These flaws could enable remote compromise of access control and environmental systems.
CISA published a critical advisory on vulnerabilities in the Weintek cMT3092X HMI device used across industrial sectors. These flaws could enable remote attackers to gain unauthorized control of the interface.
View CSAF Summary Successful exploitation of these vulnerabilities could crash the device being accessed.
CISA released an advisory on high-severity vulnerabilities in Rockwell Automation ThinManager software used for thin client management in industrial environments. Exploitation could grant attackers arbitrary code execution on thin client infrastructure.
CISA issued a critical advisory on vulnerabilities in the Johnson Controls XAAP Android application used for building management. These flaws could enable remote compromise of access control and environmental systems.