[Control systems] Johnson Controls security advisory (AV26-1052)
Canadian Cyber Centre flags a Johnson Controls flaw in American Dynamics ADVMS before version 3.10.
On October 15, 2026, the Canadian Centre for Cyber Security issued control-systems advisory AV26-1052. Johnson Controls reported that American Dynamics ADVMS versions before 3.10 are affected, referencing product advisory JCI-PSA-2026-17 as of October 7, 2026. The Cyber Centre summary does not name a CVE or describe exploitation. Administrators are told to review the vendor links and apply updates when available.
- ADVMS versions before 3.10 are affected.
- Linked Johnson Controls advisory is JCI-PSA-2026-17.
- Bulletin gives no CVE and reports no exploitation.
- Vendors
- Johnson Controls
- Products
- American Dynamics ADVMS
- Organizations
- Canadian Centre for Cyber SecurityJohnson Controls
- Countries
- Canada
From the original article
1 min read at cyber.gc.ca
Serial number: AV26-1052 Date: October 15, 2026 As of October 7, 2026, Johnson Controls is affected by a vulnerability in the following product: ADVMS Prior to 3. 10 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Vulnerability impacting American Dynamics VMS - JCI-PSA-2026-17 Johnson Controls Product Security Advisories
cyber.gc.ca
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.