Authentication Bypass Vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller
CVE-2026-71450

8.7HIGH

Key Information:

Vendor

Johnson Controls

Status
Easyio Neo Ec And Cw Edge Controller
Vendor
CVE Published:
2 November 2026

What is CVE-2026-71450?

An authentication bypass vulnerability has been identified in Johnson Controls' EasyIO Neo EC and CW Edge Controller, allowing unauthorized access through alternate paths or channels. This impacts specific versions of both products, namely EasyIO Neo EC versions 3.3b62 to 3.3b63 and CW Edge Controller versions 3.3b24 to 3.3b25. Users are advised to review their current implementations and apply necessary security measures to mitigate potential risks. For further details, please refer to the official cybersecurity advisory.

Affected Version(s)

EasyIO Neo EC and CW Edge Controller EC 3.3b62

EasyIO Neo EC and CW Edge Controller CW 3.3b24

References

https://www.johnsoncontrols.com/trust-center/cybersecurit...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.