https://cve.radiocsirt.org Latest vulnerabilities published by the CNAs operating under the CISA root of the CVE Program. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 07:10:11 +0000 https://cve.radiocsirt.org/vuln/cve-2026-27873 - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. https://cve.radiocsirt.org/vuln/cve-2026-27873 Thu, 01 Oct 2026 21:27:33 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64893 - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25. - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25. https://cve.radiocsirt.org/vuln/cve-2026-64893 Thu, 01 Oct 2026 21:25:26 +0000 https://cve.radiocsirt.org/vuln/cve-2026-64892 - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63. - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63. https://cve.radiocsirt.org/vuln/cve-2026-64892 Thu, 01 Oct 2026 21:23:33 +0000 https://cve.radiocsirt.org/vuln/cve-2026-34494 - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63. - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63. https://cve.radiocsirt.org/vuln/cve-2026-34494 Thu, 01 Oct 2026 21:20:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-34493 - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63. - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63. https://cve.radiocsirt.org/vuln/cve-2026-34493 Thu, 01 Oct 2026 21:18:55 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71449 : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63. : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63. https://cve.radiocsirt.org/vuln/cve-2026-71449 Thu, 01 Oct 2026 21:16:57 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71448 : Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63. : Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63. https://cve.radiocsirt.org/vuln/cve-2026-71448 Thu, 01 Oct 2026 21:15:22 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71454 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63. https://cve.radiocsirt.org/vuln/cve-2026-71454 Thu, 01 Oct 2026 21:13:17 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71453 - External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63. - External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63. https://cve.radiocsirt.org/vuln/cve-2026-71453 Thu, 01 Oct 2026 21:10:08 +0000 https://cve.radiocsirt.org/vuln/cve-2026-71452 - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. https://cve.radiocsirt.org/vuln/cve-2026-71452 Thu, 01 Oct 2026 21:06:20 +0000