What is CVE-2026-21662?
An unrestricted upload of file with dangerous type vulnerability exists in Johnson Controls FM Systems Employee. This allows an attacker to use malicious files. Versions prior to 2025.3.1 are affected.
Azərbaycanca: Johnson Controls FM Systems Employee proqramında təhlükəli fayl növünün məhdudiyyətsiz yüklənməsi zəifliyi aşkarlanıb. Bu boşluq təcavüzkara zərərli fayllar yükləməyə imkan verir. 2025.3.1 versiyasından əvvəlki versiyalar təsirlənir.
Related CVEs
link basis: same weakness class CWE-434
FAQ2
What vulnerability was discovered in Johnson Controls FM Systems Employee?
An unrestricted upload of file with dangerous type vulnerability exists, which allows an attacker to use malicious files.
Which versions are affected by this vulnerability?
Versions prior to 2025.3.1 are affected.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.