CVE-2026-34498

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394.

CVSS 4.0

5.1CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:H/SA:L

EPSS

0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-25)

CWE

CWE-20

Published

2026-10-06

Modified

2026-10-06

Record from

the NVD, synced 2026-10-19

References

• https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Check your stackJSON