Johnson Controls OpenBlue Employee

Johnson Controls has released a security advisory (JCI-PSA-2026-09) addressing critical vulnerabilities in its OpenBlue Employee system. These vulnerabilities – including stored XSS, HTML injection, and file upload flaws – could allow attackers to execute malicious code, inject arbitrary HTML content, and potentially c…