CYBERSECURITYTRACKER
Permanent story citation

[Control systems] Johnson Controls security advisory (AV26-1052)

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10437

As cited

Copy frozen at (site build).

vulnerabilities

[Control systems] Johnson Controls security advisory (AV26-1052)

Johnson Controls disclosed a vulnerability affecting American Dynamics Video Management System (VMS) prior to version 3.10 as of October 7, 2026. The Cyber Centre recommends users and administrators review the advisory and apply updates when available. The advisory is cataloged as JCI-PSA-2026-17.

Why it matters: Organizations running American Dynamics VMS before version 3.10 should prioritize reviewing Johnson Controls' advisory and applying patches to remediate the reported vulnerability.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary