Johnson Controls XAAP Android — ICSA-26-204-02
CISA ICS · CISA · ICSA-26-204-02
ID
ICSA-26-204-02
ICSA-26-204-02
Date
Source
CISA ICS
CISA ICS
Vendor
CISA
CISA
Threat
medium
medium
Summary
View CSAF Summary Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device. The following versions of Johnson Controls XAAP Android are affected: XAAP Android CVSS Vendor Equipment Vulnerabilities v3 3.3 Johnson Controls Johnson Controls XAAP Android Cleartext Storage of Sensitive Information Background Critical Infrastructure Sectors: Critical…
Timeline
- Published by source
- 2026-07-23
Risk context
- Reported severity or threat level: medium.
- Review exposure for the affected product or family: ICS Advisory.
Product
ICS Advisory
What to do
General, cautious steps (verify details in the official source):
- Review exposure and plan remediation based on risk and environment.
- Identify affected product versions in your inventory and verify whether you are impacted.
- Apply vendor patches/updates or recommended mitigations as soon as available.
- Read the official advisory for exact affected versions and remediation steps.
Official advisory
Evidence and provenance
- Canonical advisory ID
- ICSA-26-204-02
- Source
- CISA ICS
- Vendor
- CISA
- Published by source
- 2026-07-23
- Last source activity
- 2026-07-23
- Additional identifiers
- CVE-2026-34490
- Curated by
- hlukh.ch
Related advisories and connections
These advisories are connected by shared CVE, product, vendor, source, or time signals.