CVE-2026-71448: Johnson Controls Easyio FS32

Medium severity, CVSS 5.6. EPSS: 0.1% chance of exploitation in the next 30 days.

: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63.

Affected products

• Johnson Controls Easyio FS32: before 3.0b63 (fixed in 3.0b63)

Published 2026-10-01. Last modified 2026-10-02.