A vulnerability classified as problematic was found in Johnson Controls OpenBlue Mobile Web Application. This affects an unknown function. Executing manipulation can lead to direct request.
The identification of this vulnerability is CVE-2025-26381. The attack may be launched remotely. There is no exploit available.
Upgrading the affected component is advised.