CVE-2026-64892, CoreCVE

MEDIUM

- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations

Published Oct 1, 2026

6.3

MEDIUM

CVSS 4.0

Description

- Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations.

This issue affects Easy IO Neo: before 3.3b63.

Affected products

Vendor Johnson Controls Product Easy IO Neo Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <3.3b63

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Johnson Controls

Easy IO Neo

unaffected

Version	Status	Constraints
0	affected	<3.3b63

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (1)

https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Link	Providers	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner jci

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Jul 20, 2026

Link CVE-2026-64892

CISA Vulnrichment

Updated n/a

NVD

Status Received

Modified Oct 1, 2026

Link CVE-2026-64892

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-64892