CVE-2026-71453, CoreCVE

Back Back to CVE browser

MEDIUM

- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack

Published Oct 1, 2026

5.6

MEDIUM

CVSS 4.0

Description

- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack.

This issue affects EasyIO FS32: before 3.0b63.

Affected products

Vendor Johnson Controls Product EasyIO FS32 Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.0b63

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Johnson Controls

EasyIO FS32

unaffected

Version	Status	Constraints
0	affected	<3.0b63

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-73

References (1)

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Link	Providers	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jci

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Aug 6, 2026

Link CVE-2026-71453

CISA Vulnrichment

Updated n/a

NVD

Status Received

Modified Oct 1, 2026

Link CVE-2026-71453

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-71453