๐Ÿ” CVE Alert

CVE-2025-43867

UNKNOWN 0.0
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th

- Dependency on Vulnerable Third-Party Component vulnerability in Johnson Controls FX Server, Johnson Controls FX80, and Johnson Controls FX90 allows CAPECโ€‘17: Accessing, Modifying or Deleting Files. This issue affects FX Server: before 14.10.10 and before 14.14.1; FX80: before 14.14.10 and before 14.14.1; FX90: before 14.10.10 and before 14.14.1.

CWE CWE-1395
Vendor johnson controls
Product fx server
Published Nov 13, 2026
Last Updated Nov 13, 2026
Stay Ahead of the Next One

Get instant alerts for johnson controls fx server

Be the first to know when new unknown vulnerabilities affecting johnson controls fx server are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Johnson Controls / FX Server
0 < 14.10.10 0 < 14.14.1
Johnson Controls / FX80
0 < 14.14.10 0 < 14.14.1
Johnson Controls / FX90
0 < 14.10.10 0 < 14.14.1

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
johnsoncontrols.com: https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories