https://cve.radiocsirt.org/cna-root/icscert/recent Most recent vulnerabilities from the icscert CNA root 2026-10-02T07:10:13.608613+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Latest vulnerabilities published by the CNAs operating under the icscert root of the CVE Program. https://cve.radiocsirt.org/vuln/cve-2026-27873 CVE-2026-27873 (jci) 2026-10-01T21:27:33.323000+00:00 - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. - Use of Hard-coded Credentials vulnerability in Johnson Controls EasyIO FG allows - Pasword Spraying. This issue affects EasyIO FG: before 2.0b52. 2026-10-01T21:27:33.323000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-64893 CVE-2026-64893 (jci) 2026-10-01T21:25:26.090000+00:00 - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25. - Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack. This issue affects EasyIO NEO: before 3.3b25. 2026-10-01T21:25:26.090000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-64892 CVE-2026-64892 (jci) 2026-10-01T21:23:33.947000+00:00 - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63. - Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63. 2026-10-01T21:23:33.947000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-34494 CVE-2026-34494 (jci) 2026-10-01T21:20:55.416000+00:00 - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63. - On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63. 2026-10-01T21:20:55.416000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-34493 CVE-2026-34493 (jci) 2026-10-01T21:18:55.348000+00:00 - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63. - On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63. 2026-10-01T21:18:55.348000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-71449 CVE-2026-71449 (jci) 2026-10-01T21:16:57.610000+00:00 : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63. : Use of Hard-coded Cryptographic Key vulnerability in Johnson Controls EasyIO FS32 allows : Retrieve Embedded Sensitive Data. This issue affects EasyIO FS32: before 3.0b63. 2026-10-01T21:16:57.610000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-71448 CVE-2026-71448 (jci) 2026-10-01T21:15:22.406000+00:00 : Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63. : Insecure Default Initialization of Resource vulnerability in Johnson Controls EasyIO FS32 allows : Authentication Abuse. This issue affects EasyIO FS32: before 3.0b63. 2026-10-01T21:15:22.406000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-71454 CVE-2026-71454 (jci) 2026-10-01T21:13:17.159000+00:00 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63. Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in CWE-79 - Cross-site Scripting CAPEC-63 allows Cross-Site Scripting (XSS). This issue affects CAPEC-63: before 3.0b63. 2026-10-01T21:13:17.159000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-71453 CVE-2026-71453 (jci) 2026-10-01T21:10:08.583000+00:00 - External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63. - External Control of File Name or Path vulnerability in Johnson Controls EasyIO FS32 allows - traversal attack. This issue affects EasyIO FS32: before 3.0b63. 2026-10-01T21:10:08.583000+00:00 https://cve.radiocsirt.org/vuln/cve-2026-71452 CVE-2026-71452 (jci) 2026-10-01T21:06:20.659000+00:00 - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. - OS Command Injection vulnerability in Johnson Controls EasyIO FS32 allows OS Command Injection. This issue affects EasyIO FS32: before 3.0b63. 2026-10-01T21:06:20.659000+00:00