CVE-2026-64893, CoreCVE

HIGH

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack

Published Oct 1, 2026

7.3

HIGH

CVSS 4.0

- Cleartext Transmission of Sensitive Information vulnerability in Johnson Controls EasyIO NEO allows - Man In the Middle Attack.

This issue affects EasyIO NEO: before 3.3b25.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0	affected	<3.3b25

No remediation recorded yet.

Weaknesses (1)

CWE-319

Link	Providers	Tags
https://www.johnsoncontrols.com/trust-center/cybersecurity/security-advisories

No recorded changes yet.

Sources

Status PUBLISHED

Assigner jci

Published Oct 1, 2026

Updated Oct 1, 2026

Reserved Jul 20, 2026

Updated n/a

Status Received

Modified Oct 1, 2026

Severity n/a

Public date n/a