[Control systems] Johnson Controls security advisory (AV26-1158)

Serial number: AV26-1158
Date: November 13, 2026

As of November 12, 2026, Johnson Controls is affected by a vulnerability in the following product:

• EasyIO FW
  • Prior to or equal to V3.0b25

The Cyber Centre encourages users and administrators to review the provided web links and apply any necessary updates as they become available.

• Johnson Controls has confirmed a vulnerability impacting EasyIO FW (PDF)
• Johnson Controls Product Security Advisories