[Control Systems] Johnson Controls security advisory (AV26-837)

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>
        <div><p><strong>Serial Number: </strong>AV26-837<br /><strong>Date: </strong>August 19, 2026</p>

As of August 13, 2026, Johnson Controls is affected by vulnerabilities in the following products:

  • Airwall
    • Prior to 4.1.0
  • Metasys 12
    • all versions
  • Metasys 13
    • all versions
  • Metasys 14
    • all versions prior to v14.1.5
  • Metasys 15
    • all versions prior to v15.0.1
  • TL280
    • Prior to v5.62

The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available.

</div>

Article Link: [Control Systems] Johnson Controls security advisory (AV26-837) - Canadian Centre for Cyber Security