Medium severityNVD Advisory· Published Aug 21, 2026· Updated Sep 3, 2026

CVE-2026-27875

Description

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data.

This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Johnson Controls/Simplex Incident Manager / Autocall Fire Administratorllm-fuzzy
Range: <2.01.05

Patches

Vulnerability mechanics

References

www.johnsoncontrols.com/trust-center/cybersecurity/security-advisoriesnvd

News mentions

Johnson Controls Simplex Incident Manager
CISA Alerts

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000