CISA warns of credential-memory flaw in Johnson Controls Simplex Incident Manager

Regulatory Atlas Watchline · August 20, 2026

What happened

Key facts The advisory is about Johnson Controls Simplex Incident Manager

Why it matters

Key facts CVE-2026-27875 is the identified vulnerability

The details

Key facts The issue is cleartext storage of sensitive information in memory (CWE-316)

Read the full report

Atlas Watchline CISA published an advisory on Aug. 20 about a medium-severity flaw in Johnson Controls Simplex Incident… Read on Atlas Watchline Read on Atlas Watchline