CVE-2026-34498: L4L
Published Oct 6, 2026
·Updated
Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection.
This issue affects Illustra Standard - L4L China: before 6.0.0.66394.
Affected Software
1 affected component
Johnson Controls Illustra Standard - L4L China<6.0.0.66394
Event History
Oct 6, 2026
CVE Published
via MITRE·01:52 PM
Data Sourced
via MITRE·01:52 PM
DescriptionWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Which deployments are affected?
Johnson Controls Illustra Standard - L4L China installations on Windows are affected if they are running a version earlier than 6.0.0.66394.
2
What level of access and interaction does exploitation require?
The CVSS vector indicates that exploitation is network-reachable with low attack complexity, but requires low privileges and user interaction. The resulting impact is on a subsequent system, with high integrity impact and low confidentiality and availability impact.