CVE-2026-71448: Medium severity Johnson Controls EasyIO FS32 vulnerability
Published Oct 1, 2026
·Updated
: Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse.
This issue affects EasyIO FS32: before 3.0b63.
Affected Software
1 affected component
Johnson Controls EasyIO FS32<3.0b63
Event History
Oct 1, 2026
CVE Published
via MITRE·09:15 PM
Data Sourced
via MITRE·09:15 PM
DescriptionWeakness
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What version should be used to remediate the issue?
Upgrade EasyIO FS32 systems to version 3.0b63 or later. Versions before 3.0b63 are identified as affected.
2
Should deployments using default initialization be prioritized?
Yes. The issue is classified as insecure default initialization and can enable authentication abuse, so systems retaining default initialization behavior should be reviewed first.