Johnson Controls Airwall Hardcoded Cryptographic Key Enables Cryptanalytic Attack on Versions Before 4.1

Last refreshed2026-09-30

Status: NEW | Advisory ID: CVE-2026-64887

Key Details

CVE	CVE-2026-64887
CVSS Score / Version	7.0 (High) / CVSS v4.0
Updated	2026-09-03
Classified as	CWE-321 (Use of Hard-coded Cryptographic Key)

Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack.

This issue affects Airwall: before 4.1. (NVD)

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-64887
CVE	https://www.cve.org/CVERecord?id=CVE-2026-64887

Source

Reference

NVD

CVE