CVE-2026-27872

Published: Ott 01, 2026 Last Modified: Ott 01, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,6

Source: [email protected]

Attack Vector: local

Attack Complexity: high

Privileges Required: low

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

- Improper Privilege Management vulnerability in Johnson Controls Easy IO FG allows (Brute Force).

This issue affects Easy IO FG: before 2.0b52.

269

Draft

Abstraction: Class Structure: Simple

Security Scopes Affected:

Access Control

Potential Impacts:

Gain Privileges Or Assume Identity

All platforms may be affected

Likelihood of Exploit: Medium

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories