{"vulnerability": "CVE-2026-3449", "sightings": [{"uuid": "3ceb1b29-75f8-46e8-a512-412877a89877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3449", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg5co73y2a2n", "content": "", "creation_timestamp": "2026-03-03T08:04:50.451730Z"}, {"uuid": "040414a0-a251-4cfa-a216-b8796b93c375", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34490", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/b3ngk6uz6mptu", "content": "CVE-2026-34490 - XAAP Android Data Stored in Unencrypted Database\nCVE ID : CVE-2026-34490\n \n Published : July 31, 2026, 5:17 p.m. | 29\u00a0minutes ago\n \n Description : Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows a...", "creation_timestamp": "2026-07-31T18:14:22.263149Z"}, {"uuid": "d068b21b-2dd8-47df-b7ae-d271c0cc343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34491", "type": "seen", "source": "https://mastodon.social/ap/users/115426718704364579/statuses/117094125658809029", "content": "\ud83d\udcf0 CISA warns of XSS flaw in Johnson Controls Metasys ICS (CVE-2026-34491)\nCISA warns of a high-severity XSS flaw (CVE-2026-34491) in Johnson Controls Metasys ICS. The bug allows low-privilege users to hijack admin sessions. Affects versions 12-15. Patch now! #ICS #OTsecurity #CISA #Vulnerability\n\ud83d\udd17 https://cyber.netsecops.io/articles/cisa-warns-of-xss-flaw-in-johnson-controls-metasys-building-automation-system/?utm_source=mastodon&utm_medium=social&utm_campaign=daily", "creation_timestamp": "2026-08-14T13:36:18.985464Z"}, {"uuid": "ff859804-8fd6-4c4e-9183-7cf46c488f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34491", "type": "seen", "source": "https://bsky.app/profile/netsecio.bsky.social/post/3mt2boh23he2o", "content": "CISA warns of a high-severity XSS flaw (CVE-2026-34491) in Johnson Controls Metasys ICS. The bug allows low-privilege users to hijack admin sessions. Affects versions 12-15. Patch now! #ICS #OTsecurity #CISA #Vulnerability\n\n\ud83c\udf10 cyber[.]netsecops[.]io", "creation_timestamp": "2026-08-14T13:36:37.076185Z"}, {"uuid": "e2679b26-c2e6-48de-944d-0a21e8623d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-34496", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-204-01", "content": "", "creation_timestamp": "2026-08-13T08:49:17.688623Z"}, {"uuid": "327a450f-d4dc-44dd-9c00-d03da51412ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-34496", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mstgbpylkc2z", "content": "~Cisa~\nCritical RCE, SSRF, and privilege escalation vulnerabilities in Johnson Controls C-CURE 9000 and Victor enable unauthenticated adjacent-network attackers to execute arbitrary code.\n-\nIOCs: CVE-2026-21655, CVE-2026-21653, CVE-2026-34496\n-\n...", "creation_timestamp": "2026-08-11T20:10:20.668970Z"}]}