CVE-2026-27874: Johnson Controls Easyio FS32

Medium severity, CVSS 5.0. EPSS: 0.1% chance of exploitation in the next 30 days.

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue affects EasyIO FS32: before 3.0b63.

Affected products

• Johnson Controls Easyio FS32: before 3.0b63 (fixed in 3.0b63)

Published 2026-10-01. Last modified 2026-10-02.