CVE-2025-26381: Johnson Controls Openblue Workplace Formerly Fm Systems

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information.

Affected products

• Johnson Controls Openblue Workplace Formerly Fm Systems: up to and including 2025.1.2

Published 2025-12-17. Last modified 2026-06-17.