CVE-2026-21660

UNKNOWN 0.0

Johnson Controls-Frick Quantum HD-Hardcoded Email Credentials Saved as Plaintext in Firmware

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.

CWE	CWE-256
Vendor	johnson controls
Product	frick controls quantum hd
Published	Feb 27, 2026
Last Updated	Feb 27, 2026

Stay Ahead of the Next One

Get instant alerts for johnson controls frick controls quantum hd

Be the first to know when new unknown vulnerabilities affecting johnson controls frick controls quantum hd are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Johnson Controls / Frick Controls Quantum HD

Frick Controls Quantum HD version 10.22 and prior

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cisa.gov: https://www.cisa.gov/news-events/ics-advisories/icsa-26-057-01 johnsoncontrols.com: https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Credits

Noam Moshe of Claroty Team 82 Research group