CVE-2026-64892

- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63.

Published: 10/1/2026Modified: 10/2/2026

Related Intelligence (1)

CRITICALApt

Johnson Controls EasyIO Neo Series EC and CW Controllers

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-274-04.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability could allow an attacker to gain access to sensitive information that could be used to conduct further attacks against the system.</strong></p> <p>The following versions of Johnson Controls

CVE-2026-64892
CISA Advisories

References (1)

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories