Skip to content
OpenAdvisories
High ICSA-26-279-01 2 CVEs

Johnson Controls EasyIO FG

Published Oct 6, 2026 · Updated Oct 6, 2026

Vendor: Johnson Controls Product: EasyIO FG firmware

Summary

Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device.

Vulnerabilities 2

  • Medium 5.6
    CVE-2026-27872

    EasyIO FG

    - Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force). This issue affects Easy IO FG: before 2.0b52.

    Johnson Controls Easy IO FG
  • Medium 5.6
    CVE-2026-27873

    - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affec…

    Johnson Controls EasyIO FG

Revision history

  1. #1

    Initial Republication of Johnson Controls Product Security Advisory JCI-PSA-2026-12.

References