Skip to content
OpenAdvisories
High · 8.7 CVE-2026-71450 EUVD-2026-115650GHSA-6hr7-gpgx-7688

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Auth…

Published Nov 2, 2026 · Updated Nov 6, 2026 · Assigned by jci

Description

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass.

This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 through EC 3.3b63 and from CW 3.3b24 through CW 3.3b25.

Affected products

VendorProductAffectedFixed
Johnson Controls EasyIO Neo EC and CW Edge Controller EC 3.3b62 – ≤ EC 3.3b63, CW 3.3b24 – ≤ CW 3.3b25 —

References