CVE-2026-64894
Inclusion of Untrusted Control Sphere Functionality Enables Malicious Software Update in Johnson Controls EasyIO Neo IOManager
Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update. This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0.
CVSS 4.0 · 7.3 High
EPSS < 1%
KEV · Not listed
Vendors
Products