Vulnerabilities

TI-2026-50069 CVE-2026-71449 · GHSA-w2h3-qvv9-248h

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32…

MEDIUM 48

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00295 Published 2026-10-01 Fixed in 3.0b63 CWE-321

TI-2026-50068 CVE-2026-71448 · GHSA-5w6q-pfff-cwc7

LOW 24

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse.

CVSS 4.0MEDIUM 5.6 Adjacent network High privileges No interaction EPSS 0.00148 Published 2026-10-01 Fixed in 3.0b63 CWE-1188

TI-2026-50072 CVE-2026-71453 · GHSA-fpw9-622h-f9qj

LOW 24

- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack.

CVSS 4.0MEDIUM 5.6 Adjacent network High privileges No interaction EPSS 0.00122 Published 2026-10-01 Fixed in 3.0b63 CWE-73

TI-2026-50071 CVE-2026-71452 · GHSA-prj2-gx9w-wmh9

LOW 33

- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection.

CVSS 4.0HIGH 7.2 Adjacent network High privileges No interaction EPSS 0.00684 Published 2026-10-01 Fixed in 3.0b63 CWE-78

TI-2026-50070 CVE-2026-71451 · GHSA-fx8m-h456-hrvq

LOW 26

- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection.

CVSS 4.0MEDIUM 5.6 Adjacent network High privileges No interaction EPSS 0.00435 Published 2026-10-01 Fixed in 3.0b63 CWE-78

TI-2026-22218 CVE-2026-27874 · GHSA-x8cv-cg58-3683

LOW 22

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials.

CVSS 4.0MEDIUM 5.0 Adjacent network Low privileges No interaction EPSS 0.00135 Published 2026-10-01 Fixed in 3.0b63 CWE-798