Status: UPDATED | Advisory ID: CVE-2026-71452
| CVE | CVE-2026-71452 |
| CVSS Score / Version | 7.2 (High) / CVSS v4.0 |
| Updated | 2026-10-02 |
| Affected products | Johnson Controls EasyIO FS32 |
| Classified as | CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')) |
| Vendor | Product | Affected Versions | Patch Status |
|---|---|---|---|
| Johnson Controls | EasyIO FS32 |
| Subsystems | General OT |
| Sectors | Multiple |
- OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection.
This issue affects EasyIO FS32: before 3.0b63. (NVD)
Monitor Johnson Controls's web page for any future patch releases.
| Source | Reference |
|---|---|
| NVD | https://nvd.nist.gov/vuln/detail/CVE-2026-71452 |
| CVE | https://www.cve.org/CVERecord?id=CVE-2026-71452 |