Johnson Controls Metasys Flaw Allows Persistent Payload
August 13, 2026
1 min read
4 views
cybersecurity
news
newsapi
A vulnerability in Johnson Controls Metasys lets low-privilege users inject a persistent malicious payload via a crafted URL, executing in other users' sessions, including admins.
Was this article helpful?
0 found this helpful