security1 distinct publisher
Johnson Controls console holds passwords in cleartext memory, and the fix line names two versions
CVE-2026-27875 lets a low-privileged local user pull credentials and auth tokens out of Simplex Incident Manager memory. CISA's advisory names both v2.01.01 and v1.01.05 as the upgrade.
Publishers:cisa.gov
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap−8
- Incentives45
- Confidence66