CVE-2026-34498: Johnson Controls Illustra Standard - l4l China

Medium severity, CVSS 5.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Improper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects Illustra Standard - L4L China: before 6.0.0.66394.

Affected products

• Johnson Controls Illustra Standard - l4l China: before 6.0.0.66394 (fixed in 6.0.0.66394)

Published 2026-10-06. Last modified 2026-10-06.