Vulnerabilities
CVE-2026-21654 - Johnson Controls -Frick Quantum HD- Unauthenticated Remote Code Execution
CVE ID : CVE-2026-21654 Published : Feb. 27, 2026, 9:16 a.m. | 1 hour, 7 minutes ago Description : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Johnson Controls Frick Controls Quantum HD allows OS Command Injection.This issue affects Frick Controls Quantum HD version 10.22 and prior. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...