CVE-2026-27875
Medium
Description
Cleartext Storage of Sensitive Information in Memory vulnerability in Johnson Controls Simplex Incident Manager / Autocall Fire Administrator may allow an attcker to Retrieve Embedded Sensitive Data. This issue affects Simplex Incident Manager / Autocall Fire Administrator: before 2.01.05.
SeverityMedium
CVSS6.9
Exploit probability—
ProductSimplex Incident Manager / Autocall Fire Administrator
PublishedAug 21, 2026
First seenAug 21, 2026
Weakness typeCWE-316CWE-316
How to fix
Update
- Johnson Controls Simplex Incident Manager / Autocall Fire Administrator2.01.05 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Johnson Controls Simplex Incident Manager / Autocall Fire Administrator | v < 2.01.05 | 2.01.05 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.