CVE-2026-21662
FMS Employee Allows Upload of Unrestricted Files
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.
| CWE | CWE-434 |
| Vendor | johnson controls |
| Product | fm systems employee |
| Published | Jul 31, 2026 |
| Last Updated | Jul 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for johnson controls fm systems employee
Be the first to know when new unknown vulnerabilities affecting johnson controls fm systems employee are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Johnson Controls / FM Systems Employee
0 < 2025.3.1