CVE-2026-34490 | Johnson Controls XAAP Application up to 1.52 cleartext storage

A vulnerability described as problematic has been identified in Johnson Controls XAAP Application up to 1.52. Affected by this vulnerability is an unknown functionality. The manipulation results in cleartext storage of sensitive information.

This vulnerability is known as CVE-2026-34490. Attacking locally is a requirement. No exploit is available.

Upgrading the affected component is recommended.