Incident & CVE tracker
Breaches, vulnerabilities and CVEs in physical access control, sourced from NVD, vendor advisories and primary reporting. Every vendor gets 72 hours to respond before an entry publishes; responses render on the entry.
| Incident | CVE / source | Vendor notified | Vendor response | ||||
|---|---|---|---|---|---|---|---|
| Johnson Controls | Software House iSTAR door controllers accepted unauthenticated ICU traffic | CVE-2024-32752 | CRITICAL | 9.1 | June 6, 2024 | None given |