Researchers expose vulnerabilities in Johnson & Johnson web applications

Security researchers published a report on vulnerabilities found in Johnson & Johnson web applications. The analysis, posted on the Eaton‑Works blog on June 24, 2026, details several attack vectors. Identified flaws include injection points and insecure authentication flows. Exploiting these issues could allow attackers to access sensitive corporate data. The report provides proof‑of‑concept code demonstrating the weaknesses. Johnson & Johnson have been notified and are expected to issue patches. The findings highlight the need for regular security assessments of enterprise sites. Organizations are urged to review their own web app defenses in light of the disclosure.