CISA on May 5, 2026 republished a Johnson Controls advisory warning that CEM AC2000 versions 10.6, 11.0, and 12.0 contain a high-severity DLL hijacking flaw, CVE-2026-21661, that can let a standard local user escalate privileges on the host machine. That sentence sounds narrow, almost...