{"uuid": "d068b21b-2dd8-47df-b7ae-d271c0cc343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34491", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094125658809029", "content": "\ud83d\udcf0 CISA warns of XSS flaw in Johnson Controls Metasys ICS (CVE-2026-34491)\nCISA warns of a high-severity XSS flaw (CVE-2026-34491) in Johnson Controls Metasys ICS. The bug allows low-privilege users to hijack admin sessions. Affects versions 12-15. Patch now! #ICS #OTsecurity #CISA #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-xss-flaw-in-johnson-controls-metasys-building-automation-system/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:18.985464Z"}