Johnson Controls Simplex Incident Manager

View CSAF Summary Successful exploitation of this vulnerability could allow a local attacker with low privileges to extract user credentials (passwords and authentication tokens) from system memory, potentially leading to unauthorized access to the application and connected systems. The following versions of Johnson Controls Simplex Incident Manager are affected: Simplex Incident Manager <=V2.01 (

Back to dashboard

Threat ModerateSingle SourceAgencyConf ConfirmedUnited States · North AmericaPublishedStatus: PublishedCERTOpen original source

Original publisher

CERT

Original source URL

https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01

Source country

United States

Reporting region

North America

Language

Institution

CISA US-CERT

Published (UTC)

Aug 20, 2026, 12:00 PM

Ingested (UTC)

Aug 28, 2026, 4:35 AM

Verification

Single Source

BASE INTEL aggregates public reporting. This item is not authored by BASE INTEL. Always review the original publisher before relying on the content.

Johnson Controls Simplex Incident Manager
Advisory ID: icsa-26-232-01
View CSAF Summary Successful exploitation of this vulnerability could allow a local attacker with low privileges to extract user credentials (passwords and authentication tokens) from system memory, potentially leading to unauthorized access to the application and connected systems. The following versions of Johnson Controls Simplex Incident Manager are affected: Simplex Incident Manager <=V2.01 (
Severity: moderate
Published (UTC): 2026-08-20T12:00:00.000Z
Source: CERT
Original source: https://www.cisa.gov/news-events/ics-advisories/icsa-26-232-01

View original source