CVE-2026-34498: L4L

Q: Which deployments are affected?

Johnson Controls Illustra Standard - L4L China installations on Windows are affected if they are running a version earlier than 6.0.0.66394.

Q: What level of access and interaction does exploitation require?

The CVSS vector indicates that exploitation is network-reachable with low attack complexity, but requires low privileges and user interaction. The resulting impact is on a subsequent system, with high integrity impact and low confidentiality and availability impact.

Published Oct 6, 2026

Updated

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection.

This issue affects Illustra Standard - L4L China: before 6.0.0.66394.

Affected Software

1 affected component

Johnson Controls Illustra Standard - L4L China<6.0.0.66394

Event History

Oct 6, 2026

CVE Published

via MITRE·01:52 PM

Data Sourced

via MITRE·01:52 PM

DescriptionWeakness

Data Sourced

via NVD·02:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Johnson Controls Illustra Standard - L4L China installations on Windows are affected if they are running a version earlier than 6.0.0.66394.

What level of access and interaction does exploitation require?

The CVSS vector indicates that exploitation is network-reachable with low attack complexity, but requires low privileges and user interaction. The resulting impact is on a subsequent system, with high integrity impact and low confidentiality and availability impact.

CVE-2026-34498: L4L

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

What level of access and interaction does exploitation require?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What level of access and interaction does exploitation require?