CVE-2026-34490 — XAAP Android Data Stored in Unencrypted Database

CVE-2026-34490

XAAP Android Data Stored in Unencrypted Database PUBLISHED

Description (CNA)

Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.

Affected (CNA)

Vendor / product	Versions
Johnson Controls / XAAP Application	affected 0 before 1.53

CWE

CWE-312

References

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.