CVE-2026-71450: High severity vulnerability

Published Nov 2, 2026

Updated

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass.

This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 through EC 3.3b63 and from CW 3.3b24 through CW 3.3b25.

Event History

Nov 2, 2026

CVE Published

via NVD·11:17 PM

Data Sourced

via NVD·11:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be prioritized for remediation?

Prioritize Johnson Controls EasyIO Neo EC systems running EC 3.3b62 through EC 3.3b63 and CW Edge Controller systems running CW 3.3b24 through CW 3.3b25.

What exploitation prerequisites are indicated by the supplied severity vector?

The supplied vector indicates network reachability, high attack complexity, attacker privileges, a prerequisite condition, and active user interaction. It also indicates high potential impact to confidentiality, integrity, and availability.

CVE-2026-71450: High severity vulnerability

Event History

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What exploitation prerequisites are indicated by the supplied severity vector?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for remediation?

What exploitation prerequisites are indicated by the supplied severity vector?