Medium Patch available
Johnson Controls reports flaw in American Dynamics VMS before version 3.10
Canadian Centre for Cyber SecurityJohnson Controls, American Dynamics
What happened. As of 7 October 2026, Johnson Controls is affected by a vulnerability in ADVMS (American Dynamics VMS) in versions before 3.10. Advisory reference: JCI-PSA-2026-17.
Who is affected. Johnson Controls ADVMS (American Dynamics VMS), versions before 3.10.
What to do. Check whether you run ADVMS before version 3.10, then review the Johnson Controls advisory and apply any necessary updates.
Source: Canadian Centre for Cyber Security (opens cyber.gc.ca)
More on Johnson Controls