CWE-316

Johnson Controls Simplex Incident Manager Cleartext Memory Defect Exposes Facility Credentials CVE-2026-27875

CISA Advisory ICSA-26-232-01 warns of a high-severity cleartext credential storage flaw in Johnson Controls Simplex Incident Manager fire safety software.