CVE-2026-27874

Published: Ott 01, 2026 Last Modified: Ott 02, 2026

ExploitDB:

Other exploit source:

Google Dorks:

MEDIUM 5,0

Source: [email protected]

Attack Vector: adjacent

Attack Complexity: low

Privileges Required: low

User Interaction: none

Confidentiality: N/A

Integrity: N/A

Availability: N/A

AI Translation Available

: Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FS32 allows : Exploitation of Default or Hard-coded Credentials.

This issue affects EasyIO FS32: before 3.0b63.

798

Draft

Abstraction: Base Structure: Simple

Security Scopes Affected:

Access Control Integrity Confidentiality Availability Other

Potential Impacts:

Bypass Protection Mechanism Read Application Data Gain Privileges Or Assume Identity Execute Unauthorized Code Or Commands Other

Technologies: Mobile, ICS/OT

Likelihood of Exploit: High

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories