CVE-2026-27875

Published on August 21, 2026

Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.

Weakness type (CWE)CWE-316

Credenziali in chiaro in memoria: Johnson Controls corregge una falla medium nel Simplex Incident Manager

Vulnerabilities

Cleartext Credentials in Memory: Johnson Controls Fixes Medium-Severity Flaw in Simplex Incident Manager

Johnson Controls fixes medium-severity flaw CVE-2026-27875 in Simplex Incident Manager, preventing cleartext credential extraction from memory. Update recommended.

Aug 25, 20263 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Related articles

Cleartext Credentials in Memory: Johnson Controls Fixes Medium-Severity Flaw in Simplex Incident Manager