All vulnerabilities
CVE-2026-34498

L4L

Johnson Controls Illustra Standard - L4L China
Open in ThreatlineRecord JSON
CVSS
5.1Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.69%Chance of exploitation activity in the next 30 days, higher than 52% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in6.0.0.66394Fixed versionCVE List
Published6 Oct 2026Updated 6 Oct 2026CVE List

What fixes it

  • 6.0.0.66394Illustra Standard - L4L ChinaCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection.

This issue affects Illustra Standard - L4L China: before 6.0.0.66394.

Text from CVE List

Affected versions 1

  • Illustra Standard - L4L Chinaaffected: all versions before 6.0.0.66394CVE List

References 1