cve 2026 34490

Johnson Controls has issued a security fix for XAAP Android, addressing a local data exposure weakness that could allow sensitive application information to be read in plaintext from an affected device. The issue, tracked as CVE-2026-34490, affects XAAP Android versions earlier than 1.53 and has...