CVE-2026-21660Disclosure(johnsoncontrols / frick_controls_quantum_hd)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthorized access, exposure of sensitive information, and potential misuse or system compromise This issue affects Frick Controls Quantum HD version 10.22 and prior.

johnsoncontrols CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-256CWE-522

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

frick_controls_quantum_hd
frick_controls_quantum_hd_firmware

Threat summary

5 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 3d ago at 2 mentions (2026-02-27); latest day: 1
5 total mentions across 4 days

Affected systems

Vendors

johnsoncontrols

Products

frick_controls_quantum_hdfrick_controls_quantum_hd_firmware

1 version affected across 2 products

Deep dive

Activity timeline5 mentions / 4d

Signal classification2 categories

Disclosure

480.0%

General

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-27	2	Disclosure2
2026-03-02	1	Disclosure1
2026-03-04	1	Disclosure1
2026-03-16	1	General1

Full discourse5 posts

PurpleOps@PurpleOps_io206d
General
🚨 𝐅𝐫𝐞𝐬𝐡 𝐂𝐕𝐄 𝐚𝐥𝐞𝐫𝐭 𝐣𝐮𝐬𝐭 𝐢𝐧! Discover how CVE-2026-21660 and Frick Controls Quantum HD flaws threaten ICS, and how breach detection can help mitigate risk today. 🌐 Explore the write-up → https://www.purple-ops.io/cybersecurity-threat-intelligence-blog/cve-2026-21660-ics-vulnerabilities/ We’d love to hear your perspective!
Post summary
The post announces a fresh CVE alert for CVE-2026-21660 and a flaw in Frick Controls Quantum HD, but offers no detailed technical information, exploit code, or mitigation guidance.
0000065
92 followersView on X
CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2026-21660 (CVSS:6.9, CRITICAL) is Analyzed. Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in F..https://nvd.nist.gov/vuln/detail/CVE-2026-21660 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2026-21660, a critical firmware flaw involving hardcoded plaintext email credentials, providing CVSS and CWE details, but offers no PoC, exploit, or patch information.
0000034
173 followersView on X
The Hacker Wire@TheHackerWire219d
Disclosure
🔴 CVE-2026-21660 - Critical Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and prior lead to unauthori... https://www.thehackerwire.com/vulnerability/CVE-2026-21660/ https://t.co/Rj61hYa00F
Post summary
The post announces a critical CVE‑2026‑21660 affecting Frick Controls Quantum HD firmware, highlighting plaintext storage of email credentials (CWE‑256) and linking to a vulnerability article.
0000044
122 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds223d
Disclosure
CVE-2026-21660 Hardcoded Email Credentials Vulnerability in Frick Controls Quantum HD Firmware https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-21660
Post summary
The post announces CVE-2026-21660, a hardcoded email credentials vulnerability in Frick Controls Quantum HD firmware, with no PoC, exploit, or patch information provided.
0000033
4.0K followersView on X
CVE@CVEnew223d
Disclosure
CVE-2026-21660 Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and pri… https://www.cve.org/CVERecord?id=CVE-2026-21660
Post summary
The tweet announces CVE-2026-21660, a hardcoded plaintext password flaw in Frick Controls Quantum HD firmware, providing basic technical details but no exploits, patches, or evidence of active exploitation.
0000070
56.6K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
HW	johnsoncontrols	frick_controls_quantum_hd	-	-	-
OS	johnsoncontrols	frick_controls_quantum_hd_firmware	-	-	-

Explore more

Back to dashboard johnsoncontrols CVEs frick_controls_quantum_hd vulnerabilities

What researchers are saying

CVE-2026-21660

PurpleOps[verified]@PurpleOps_ioGeneral

The post announces a fresh CVE alert for CVE-2026-21660 and a flaw in Frick Controls Quantum HD, but offers no detailed technical information, exploit code, or mitigation guidance.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2026-21660, a critical firmware flaw involving hardcoded plaintext email credentials, providing CVSS and CWE details, but offers no PoC, exploit, or patch information.

The Hacker Wire@TheHackerWireDisclosure

The post announces a critical CVE‑2026‑21660 affecting Frick Controls Quantum HD firmware, highlighting plaintext storage of email credentials (CWE‑256) and linking to a vulnerability article.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The post announces CVE-2026-21660, a hardcoded email credentials vulnerability in Frick Controls Quantum HD firmware, with no PoC, exploit, or patch information provided.

CVE@CVEnewDisclosure

The tweet announces CVE-2026-21660, a hardcoded plaintext password flaw in Frick Controls Quantum HD firmware, providing basic technical details but no exploits, patches, or evidence of active exploitation.