High · 8.7 CVE-2026-106018 EUVD-2026-124711GHSA-whf4-h326-x6hg

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass. This iss…

Published Nov 12, 2026 · Updated Nov 13, 2026 · Assigned by jci

Description

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO FW allows Authentication Bypass.

This issue affects EasyIO FW: through 3.0b25.

Vendor	Product	Affected	Fixed
Johnson Controls	EasyIO FW	≤ 3.0b25	—