CVE-2026-34498

L4L PUBLISHED

Description (CNA)

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394.

Affected (CNA)

Vendor / product	Versions
Johnson Controls / Illustra Standard - L4L China	affected 0 before 6.0.0.66394

CWE

CWE-20

References

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.