Serial number: AV26-1052 Date: October 15, 2026 As of October 7, 2026, Johnson Controls is affected by a vulnerability in the following product: ADVMS Prior to 3.10 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Vulnerability impacting American Dynamics VMS - JCI-PSA-2026-17 Johnson Controls Product Security Advisories
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-8065, CVE-2026-8066, CVE-2026-8067, CVE-2010-2965, CVE-2014-9195, CVE-2023-46143, CVE-2024-8176, CVE-2025-59375, CVE-2026-34197, CVE-2026-7395, CVE-2026-11796, CVE-2026-15340, CVE-2026-27872, CVE-2026-27873, Summary: CISA has released six Industrial Control Systems (ICS) Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits…
CVSS 9.8 Hitachi Energy Johnson Controls Savannah FI
Serial number: AV26-1010 Date: October 7, 2026 As of October 6, 2026, Johnson Controls is affected by a vulnerability in the following product: Illustra Standard - L4L China Prior to 6.0.0.66394 The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available. Vulnerability impacting Illustra Standard - L4L China Johnson Controls - Product Security Advisories
View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain full unauthorized access to the device. The following versions of Johnson Controls EasyIO FG are affected: EasyIO FG firmware <=2.0b52 (CVE-2026-27872, CVE-2026-27873) CVSS Vendor Equipment v3 7.7 Johnson Controls EasyIO FG firmware 2 Vulnerabilities Use of Hard-coded Credentials, Improper Privilege Management Background Critical Infrastructure Sectors: Critical Manufacturing, Commercial…
EPSS 0.00 CVE-2026-27872 CVE-2026-27873 Johnson Controls výroba a průmysl veřejná správa doprava energetika US
Serial number: AV26-991 Date: October 2, 2026 As of October 1, 2026, Johnson Controls is affected by vulnerabilities in the following products: Easy IO FG Prior to 2.0b52 Easy IO Neo Prior to 3.3b63 Prior to 3.3b25 EasyIO FS32 Prior to 3.0b63 Prior to 3.3b63 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Johnson Controls - Product Security Advisories
Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-90443, CVE-2026-90444, CVE-2026-90445, CVE-2026-90446, CVE-2026-90447, CVE-2026-90448, CVE-2026-90449, CVE-2026-90450, CVE-2026-90451, CVE-2026-90452, CVE-2026-90453, CVE-2026-90454, CVE-2026-90455, CVE-2026-90456, CVE-2026-90457, CVE-2026-101104, CVE-2026-96613, CVE-2026-64892, CVE-2026-15952, CVE-2026-15953 (+9 other associated CVEs), Summary: CISA released six Industrial Control…
CVSS 9.8 ABB Johnson Controls Monta Armatura LLC FI
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker tointercept and read sensitive information, including credentials andsession data. The following versions of Johnson Controls EasyIO Neo Series EC and CW Controllers are affected: EasyIO Neo Series EC Controllers V3.3b62 (CVE-2026-64893) EasyIO Neo Series EC Controllers V3.3b63 (CVE-2026-64893) EasyIO Neo Series CW Controllers V3.3b24 (CVE-2026-64893) EasyIO Neo Series CW Controllers V3.3b25 (CVE-2026-64893)…
EPSS 0.00 CVSS 5.4 CVE-2026-64893 Johnson Controls výroba a průmysl veřejná správa doprava energetika US
View CSAF Summary Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system. The following versions of Johnson Controls EasyIO Neo Series EC and CW Controllers are affected: EasyIO Neo Series EC Controllers V3.3b63 (CVE-2026-64892) EasyIO Neo Series EC Controllers V3.3b62 (CVE-2026-64892) EasyIO Neo Series CW Controllers V3.3b25 (CVE-2026-64892) EasyIO Neo Series CW Controllers…
EPSS 0.00 CVSS 3.5 CVE-2026-64892 Johnson Controls výroba a průmysl veřejná správa doprava energetika US