QwikSec

Security Database

CVE

CWE

Training

CVE-2026-21660

Published: Feb 27, 2026

Modified: Feb 27, 2026

PUBLISHED

Description

Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.

Vendor	Product	Versions
Johnson Controls	Frick Controls Quantum HD	affected `Frick Controls Quantum HD version 10.22 and prior`

Weaknesses (CWE)

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.