CVE-2026-21657

This vulnerability allows an attacker to gain unauthorized access to the Frick Controls Quantum HD system by using hardcoded email credentials that are stored in plain text, making them easy to find. It affects versions 10.22 and earlier, meaning any system running these versions is at risk if the attacker can access the firmware.

This vulnerability allows an attacker to remotely run any code on the affected Frick Controls Quantum HD devices without needing to log in, which can completely take over the system. It affects versions 10.22 and earlier, meaning any device running these versions is at risk if exposed to the internet.

An attacker can remotely execute malicious code on Johnson Controls Frick Controls Quantum HD devices without needing to log in, due to poor input validation in certain settings. This vulnerability affects versions 10.22 and earlier, allowing unauthorized actions that could compromise the device's security.

This vulnerability allows an attacker to inject malicious code into the Frick Controls Quantum HD device, potentially taking control of it before any user authentication is required. It affects versions 10.22 and earlier, and it arises from the device not properly checking the input it receives.

An attacker can exploit a flaw in Johnson Controls Frick Controls Quantum HD to run unauthorized commands on the device before any user authentication takes place. This vulnerability affects versions 10.22 and earlier, and it arises from the device not properly checking certain inputs, which could lead to unexpected and potentially harmful actions.