CVE-2021-27664: Johnsoncontrols Exacqvision Web Service

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server.

Affected products

• Johnsoncontrols Exacqvision Web Service: up to and including 20.06.11.0

Published 2021-10-11. Last modified 2026-06-17.