Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-26381 EUVD-2025-203901GHSA-wv84-fc78-m2qm

OpenBlue Mobile Web Application configuration issue for optional for OpenBlue Workplace (formerly FM Systems)

Published Dec 17, 2025 · Updated Dec 17, 2025 · Assigned by jci

Vendor: Johnson Controls Product: OpenBlue Workplace (formerly FM Systems)

Description

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

Affected products

VendorProductAffectedFixed
Johnson Controls OpenBlue Workplace (formerly FM Systems) ≤ 2025.1.2 —

Advisories 1

References