CVE Database
/

CVE-2026-21661

Back to search

CVE-2026-21661

Published: May 6, 2026

Modified: May 6, 2026

PUBLISHED

Description

Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths. This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3.

VendorProductVersions

JohnsonControls

AC2000

affected
10.6 - < release 10
affected
11.0 - < release 9
affected
12 - < release 3

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now