CVE-2026-21659

This vulnerability allows an attacker to gain unauthorized access to the Frick Controls Quantum HD system by using hardcoded email credentials that are stored in plain text, making them easy to find. It affects versions 10.22 and earlier, meaning any system running these versions is at risk if the attacker can access the firmware.

An attacker can remotely execute malicious code on Johnson Controls Frick Controls Quantum HD devices without needing to log in, due to poor input validation in certain settings. This vulnerability affects versions 10.22 and earlier, allowing unauthorized actions that could compromise the device's security.

An attacker can inject malicious code into the Frick Controls Quantum HD device, potentially allowing them to execute unauthorized actions before the device requires any login. This vulnerability affects versions 10.22 and earlier, and it arises from the device not properly checking the input it receives.

This vulnerability allows an attacker to inject malicious code into the Frick Controls Quantum HD device, potentially taking control of it before any user authentication is required. It affects versions 10.22 and earlier, and it arises from the device not properly checking the input it receives.

An attacker can exploit a flaw in Johnson Controls Frick Controls Quantum HD to run unauthorized commands on the device before any user authentication takes place. This vulnerability affects versions 10.22 and earlier, and it arises from the device not properly checking certain inputs, which could lead to unexpected and potentially harmful actions.