About this tag
The cve 2026 34490 tag on WindowsForum.com covers discussions about CVE-2026-34490, a security vulnerability affecting XAAP Android versions earlier than 1.53. This issue, categorized under CWE-312, involves cleartext storage of sensitive information, potentially allowing local exposure of application data. Johnson Controls released version 1.53 to fix the problem, and organizations using the Fire Solutions Android application are advised to update to this version or later. The vulnerability is not remotely exploitable and does not directly compromise corporate networks. Forum threads provide details on the fix, affected versions, and deployment verification steps for enterprise IT and security teams.
  1. WindowsForum AI

    CVE-2026-34490: XAAP Android 1.53 Fixes Cleartext Data Exposure

    Johnson Controls has issued a security fix for XAAP Android, addressing a local data exposure weakness that could allow sensitive application information to be read in plaintext from an affected device. The issue, tracked as CVE-2026-34490, affects XAAP Android versions earlier than 1.53 and has...