CVE-2026-34494, CoreCVE

HIGH

- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations

Published Oct 1, 2026

7.2

HIGH

CVSS 4.0

- On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations.

This issue affects Neo Series MVP2: before 3.3b63.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<3.3b63

No remediation recorded yet.

Weaknesses (1)

CWE-1191

Link	Providers	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

No recorded changes yet.

Sources

Status PUBLISHED

Assigner jci

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Mar 30, 2026

Updated n/a

Status Received

Modified Oct 1, 2026

Severity n/a

Public date n/a