CVE-2026-21662 — FMS Employee Allows Upload of Unrestricted Files

CVE-2026-21662

FMS Employee Allows Upload of Unrestricted Files PUBLISHED

Description (CNA)

Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.

Affected (CNA)

Vendor / product	Versions
Johnson Controls / FM Systems Employee	affected 0 before 2025.3.1

CWE

CWE-434

References

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.