https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:44:57.142915+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-358251 EUVD-2026-358251 2026-10-03T23:44:57.229844+00:00 EUVD-2026-358251 https://cve.radiocsirt.org/vuln/fkie_cve-2026-21661 fkie_cve-2026-21661 2026-10-03T23:44:57.229897+00:00

An Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths.

This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3.

 https://cve.radiocsirt.org/vuln/ghsa-qcgm-qmr8-52ww GHSA-qcgm-qmr8-52ww 2026-10-03T23:44:57.229936+00:00

Uncontrolled Search Path Element vulnerability in JohnsonControls AC2000 on Windows allows Leveraging/Manipulating Configuration File Search Paths.

This issue affects AC2000: from 10.6 before release 10, from 11.0 before release 9, from 12 before release 3.

 https://cve.radiocsirt.org/vuln/icsa-26-125-05 ICSA-26-125-05 — Johnson Controls CEM AC2000 2026-10-03T23:44:57.229957+00:00

The affected product is vulnerable to DLL hijacking, which could allow an attacker to escalate standard user privileges on the host machine.