Arbitrary file upload in Johnson Controls Fm Systems Employee
CVE-2026-21662
Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files. This issue affects FM Systems Employee: before 2025.3.1.
Vulnerability class: Unrestricted File Upload
Affected products
- Johnson Controls Fm Systems Employee — versions 0