[ Vendor · 14 CVEs ]
Johnson Controls
CVEs affecting Johnson Controls published in the last 30 days, plus any Johnson Controls CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-34499 | 7 Oct 2026 | CVSS 8.5 | Johnson Controls ADVMSUse of hard-coded cryptographic key vulnerability in Johnson Controls ADVMS allows Read Sensitive Constants Within an Executable. This issue affects… | |
| CVE-2026-34498 | 6 Oct 2026 | CVSS 5.1 | Johnson Controls Illustra Standard - L4L ChinaImproper input validation vulnerability in Johnson Controls Illustra Standard - L4L China on Windows allows OS Command Injection. This issue affects… | |
| CVE-2026-71452 | 1 Oct 2026 | CVSS 7.2 | Johnson Controls EasyIO FS32- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. | |
| CVE-2026-71453 | 1 Oct 2026 | CVSS 5.6 | Johnson Controls EasyIO FS32- External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32… | |
| CVE-2026-64892 | 1 Oct 2026 | CVSS 6.3 | Johnson Controls Easy IO Neo- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue… | |
| CVE-2026-64893 | 1 Oct 2026 | CVSS 7.3 | Johnson Controls EasyIO NEO- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects… | |
| CVE-2026-71448 | 1 Oct 2026 | CVSS 5.6 | Johnson Controls EasyIO FS32: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO… | |
| CVE-2026-71449 | 1 Oct 2026 | CVSS 9.3 | Johnson Controls EasyIO FS32: Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects… | |
| CVE-2026-27873 | 1 Oct 2026 | CVSS 5.6 | Johnson Controls EasyIO FG- Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. | |
| CVE-2026-34493 | 1 Oct 2026 | CVSS 7.2 | Johnson Controls EasyIO FS32- On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO… | |
| CVE-2026-34494 | 1 Oct 2026 | CVSS 7.2 | Johnson Controls Neo Series MVP2- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects… | |
| CVE-2026-71451 | 1 Oct 2026 | CVSS 5.6 | Johnson Controls EasyIO FS32- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows - Command Injection. This issue affects EasyIO FS32: before 3.0b63. | |
| CVE-2026-27874 | 1 Oct 2026 | CVSS 5.0 | Johnson Controls EasyIO FS32: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials. This issue… | |
| CVE-2026-27872 | 1 Oct 2026 | CVSS 5.6 | Johnson Controls Easy IO FG- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects Easy IO FG: before 2.0b52. |