CVE-2026-71448, CoreCVE

MEDIUM

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse

Published Oct 1, 2026

5.6

MEDIUM

CVSS 4.0

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse.

This issue affects EasyIO FS32: before 3.0b63.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<3.0b63

No remediation recorded yet.

Weaknesses (1)

CWE-1188

Link	Providers	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

No recorded changes yet.

Sources

Status PUBLISHED

Assigner jci

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Aug 6, 2026

Updated n/a

Status Received

Modified Oct 1, 2026

Severity n/a

Public date n/a