VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 27, 2026· Updated Feb 27, 2026

Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware

CVE-2026-21660

Description

Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.

Affected products

2
  • Johnson Controls/Quantum HDllm-create
    Range: <=10.22
  • Johnson Controls/Frick Controls Quantum HDv5
    Range: Frick Controls Quantum HD version 10.22 and prior

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.