Skip to content
OpenAdvisories
Low ICSA-26-204-02 1 CVE

Johnson Controls XAAP Android

Published Jul 23, 2026 · Updated Jul 23, 2026

Vendor: Johnson Controls Product: XAAP Android

Summary

Successful exploitation of this vulnerability could result in an attacker obtaining confidential information from the device.

Vulnerabilities 1

  • Medium 4.8
    CVE-2026-34490

    XAAP Android Data Stored in Unencrypted Database

    Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.

    Johnson Controls XAAP Application

Revision history

  1. #1

    Initial Republication of Johnson Controls JCI-PSA-2026-10

References