CVE-2026-71450

The record

Authentication bypass using an alternate path or channel vulnerability in Johnson Controls EasyIO Neo EC and CW Edge Controller allows Authentication Bypass. This issue affects EasyIO Neo EC and CW Edge Controller: from EC 3.3b62 through EC 3.3b63 and from CW 3.3b24 through CW 3.3b25.

Affected packages

Related vulnerabilities

• CVE-2026-55186 Silverstripe MFA provides multi-factor authentication for Silverstripe CMS. CWE-288
• CVE-2026-77799 ManageEngine Key Manager Plus versions before 7150 are vulnerable to a Two-Factor… CWE-288
• CVE-2026-116606 An authentication bypass in Barracuda Email Security Gateway versions earlier than… CWE-288
• CVE-2026-115829 In Secret Server versions earlier than 12.3.1, a user could bypass the initial login step… CWE-288
• CVE-2026-119420 Lago through 1.55.0 contains an authentication bypass vulnerability that allows… CWE-288
• CVE-2026-118572 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OAuth… CWE-288
• CVE-2026-118582 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal CAPTCHA… CWE-288
• CVE-2026-118554 Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal OpenID… CWE-288