Critical severity9.8NVD Advisory· Published Feb 27, 2026· Updated Aug 24, 2026
CVE-2026-21660
CVE-2026-21660
Description
A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise
This issue affects Frick Controls Quantum HD version 10.22 and prior.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:johnsoncontrols:frick_controls_quantum_hd_firmware:*:*:*:*:*:*:*:*range: <=10.22
- (no CPE)range: Frick Controls Quantum HD version 10.22 and prior
- Range: <=10.22
Patches
Vulnerability mechanics
References
2- www.cisa.gov/news-events/ics-advisories/icsa-26-057-01nvdThird Party AdvisoryUS Government Resource
- www.johnsoncontrols.com/trust-center/cybersecurity/security-advisoriesnvdVendor Advisory
News mentions
0No linked articles in our index yet.