https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T14:36:08.632745+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-27657 CVE-2021-27657 — Metasys Improper Privilege Management 2026-10-04T14:36:08.649353+00:00

Affected: Johnson Controls Metasys

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls Metasys version 11.0 and prior versions.