CVE-2026-71449, CoreCVE

CRITICAL

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data

Published Oct 1, 2026

9.3

CRITICAL

CVSS 4.0

: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data.

This issue affects EasyIO FS32: before 3.0b63.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<3.0b63

No remediation recorded yet.

Weaknesses (1)

CWE-321

Link	Providers	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

No recorded changes yet.

Sources

Status PUBLISHED

Assigner jci

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Aug 6, 2026

Updated n/a

Status Received

Modified Oct 1, 2026

Severity n/a

Public date n/a