CyberRota Analysis
AI-GeneratedThe Johnson Controls XAAP Application for Android versions prior to 1.53 is vulnerable due to the cleartext storage of sensitive information, which can be exploited by attackers on jailbroken or compromised devices to retrieve confidential data. Organizations using this application should prioritize remediation to mitigate potential data breaches and protect sensitive information.
CVE
CVE-2026-34490
Severity
MEDIUM
CVSS
5.5
EPSS
0.08%
Android
Original NVD Description
Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data. This issue affects XAAP Application: before 1.53.
Related CVEs
Other vulnerabilities affecting the same vendor(s)