CVE-2026-34490 – XAAP Android Data Stored in Unencrypted Database

CVE ID :CVE-2026-34490

Published : July 31, 2026, 5:17 p.m. | 29 minutes ago

Description :Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data.

This issue affects XAAP Application: before 1.53.

Severity: 4.8 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…