Vulnerabilities

Johnson Controls Metasys Flaw Allows Persistent Payload

August 13, 2026 1 min read 4 views
cybersecurity news newsapi
A vulnerability in Johnson Controls Metasys lets low-privilege users inject a persistent malicious payload via a crafted URL, executing in other users' sessions, including admins.

Was this article helpful?

0 found this helpful

Ready to protect your organization?

Get started with Phishlens and run your first phishing simulation today.